Governance, Risk, and Compliance (GRC) Analyst/ Austin, TX

Key Responsibilities:

• Governance
• Develop, maintain, and enforce IT security policies, standards, and procedures.
• Support internal governance frameworks and ensure alignment with industry best practices.
• Assist in the implementation of security awareness programs.
• Risk Management
• Identify, assess, and monitor IT and business risks.
• Conduct risk assessments and recommend mitigation strategies.
• Maintain risk registers and track remediation efforts.
• Compliance
• Ensure compliance with regulatory requirements (e.g., GDPR, HIPAA, ISO 27001, SOX).
• Coordinate internal and external audits and support audit readiness.
• Monitor and report on compliance status and gaps.
• Control Implementation
• Work with cross-functional teams to implement technical and administrative controls.
• Evaluate the effectiveness of existing controls and recommend improvements.
• Reporting & Documentation
• Prepare reports for management on risk posture, compliance status, and audit findings.
• Maintain documentation related to policies, procedures, and compliance activities.

Required Skills & Qualifications:

• Strong experience in GRC, IT audit, or cybersecurity.
• Strong understanding of regulatory frameworks and standards (e.g., NIST, ISO, COBIT).
• Experience with GRC tools (e.g., RSA Archer, ServiceNow GRC, MetricStream).
• Excellent analytical, communication, and documentation skills.
• Certifications such as CISA, CRISC, CISSP, or ISO 27001 Lead Implementer are a plus.