Junior Governance, Risk, and Compliance Specialist

About NY Creates:

NY Creates serves as a bridge for advanced electronics, leads projects that advance R&D in emerging technologies, and generates the jobs of tomorrow. NY Creates also runs some of the most advanced facilities in the world, boasts more than 3,000 industry experts and faculty, and manages public and private investments of approximately $25 billion - placing it at the global epicenter of high-tech innovation and commercialization.

Position Summary, Junior Governance, Risk, and Compliance Specialist

The Junior GRC Specialist supports the organization's governance, risk, and compliance activities and helps maintain a risk-aware, evidence-driven GRC program across NY Creates. This role provides day-to-day support for risk assessments, risk register maintenance, third-party vendor risk reviews, cybersecurity policies and standards, internal audit activities, compliance documentation, and security awareness initiatives.

Working under the direction of the Director of GRC and Trade Compliance and senior GRC personnel, the Junior GRC Specialist assists with collecting and organizing compliance evidence, tracking remediation activities, maintaining GRC records, coordinating requests with control owners, and supporting assessments and audits. The incumbent develops practical knowledge of applicable requirements and frameworks, including NIST 800-171, CMMC 2.0, NIST Cybersecurity Framework, CIS Controls, NSPM-33, and applicable ITAR/EAR requirements.

Key Responsibilities

• Assist with enterprise risk assessments by gathering information, documenting risks, supporting risk discussions, and maintaining assigned portions of the risk register.
• Support third‑party risk management activities by coordinating questionnaires, collecting and organizing vendor documentation, tracking outstanding items, and escalating concerns to senior GRC staff.
• Assist with maintaining cybersecurity policies, standards, procedures, and related documentation; help track reviews, approvals, and required updates.
• Support internal cybersecurity audits by organizing evidence, documenting control activities, tracking findings, and monitoring remediation actions.
• Assist with compliance and assessment preparation, including collecting evidence, maintaining documentation, and coordinating requests for information under the direction of senior GRC staff.
• Maintain GRC records, evidence repositories, risk registers, policy records, vendor information, and audit documentation with a high degree of accuracy.
• Assist with GRC reporting and dashboards by gathering data, updating metrics, and preparing routine reports for review by GRC leadership.
• Support security awareness and compliance training activities by maintaining training records, coordinating communications, and assisting with completion tracking.
• Assist with the administration and use of enterprise GRC tools, including workflows for risk, policy, vendor, audit, and evidence management.
• Coordinate with IT, cybersecurity, legal, procurement, and other control owners to obtain information and support compliance activities.
• Monitor assigned compliance and remediation activities and communicate overdue items or issues to the appropriate GRC team member.
• Develop working knowledge of applicable laws, regulations, contractual requirements, and cybersecurity frameworks relevant to NY Creates' environment.
• Demonstrate critical thinking, attention to detail, dependability, and the ability to organize multiple priorities in a deadline‑driven environment.
• Communicate effectively with technical and non‑technical personnel and maintain professional written documentation.
• Other reasonable duties as assigned.

Minimum Qualifications, Junior Governance, Risk, and…