GRC Analyst - Fulltime

Portland, OR, US • Posted 1 day ago • Updated 22 hours ago
Full Time
On-site
Fitment

Dice Job Match Score™

🛠️ Calibrating flux capacitors...

Job Details

Skills

  • GRC

Summary

Title: GRC Analyst
Location: Portland, OR
Duration: Full Time

We are seeking a detail-oriented and technically proficient Principal GRC Analyst to join our Information Security team, with a focus on validating and testing security controls across the enterprise. This role will serve as the most senior member of a small team focused on validating the effectiveness of information security controls. It is ideal for professionals with 8 or more years of experience in GRC, IT audit, or cybersecurity operations who have supervised IT control testing teams and are passionate about driving continuous improvement.

  • Plan, lead, and execute control validation and testing activities across various domains (e.g., access management, vulnerability management, incident response, data protection).
  • Mentor junior analysts, providing guidance on control validation methodologies and best practices while fostering a culture of accountability
  • Provide subject matter expertise regarding information security control validation and compliance frameworks to the CDT organization and its business partners
  • Document control issues and collaborate with stakeholders to develop remediation recommendations
  • Develop and enhance control testing methodologies, procedures, and reporting mechanisms
  • Prepare risk reports and dashboards for management and governance committees.
  • Influence the evolution of the GRC program through maturing tools, automation, processes, and metrics, and processes.
  • Experienced and Passionate: You are a seasoned security professional with a passion for governance, risk, and compliance
  • Methodical and Pragmatic: You approach control testing with precision and can identify pragmatic solutions to addressing risks
  • Self-Motivated and Curious: You are driven to understand the "why", you thoughtfully investigate complex issues and ask probing questions
  • Leadership-Oriented: You demonstrate initiative and are experienced in mentoring and developing others
  • Relationship Driven: You build rapport and support your team and colleagues across functions
  • Influential Communicator: Whether in writing or verbally, you can effectively explain technical concepts and risks to colleagues and management without excessive jargon.
  • Bachelor's degree in a technical field such as cybersecurity or business information systems
  • Security certifications such as CISSP, CISA, CRISC, Sec+, or CC preferred.
  • Minimum 8 years' experience in GRC, IT audit, or information security within mid-size to large corporate environment
  • Proven expertise in cybersecurity frameworks such as NIST CSF or ISO 27001
  • Hands-on experience in leading IT audits, risk assessments, or compliance programs
Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.
  • Dice Id: 90943872
  • Position Id: 2026-42860
  • Posted 1 day ago
Create job alert
Set job alertNever miss an opportunity! Create an alert based on the job you applied for.

Similar Jobs

Portland, Oregon

Today

Full-time

USD 96,443.00 - 125,378.00 per year

Camas, Washington

Today

Easy Apply

Full-time

USD 180,000.00 - 210,000.00 per year

Camas, Washington

Today

Full-time

Compensation information provided in the description

Camas, Washington

Today

Easy Apply

Full-time

USD 140,000.00 - 175,000.00 per year

Search all similar jobs