Governance, Risk, and Compliance; GRC Analyst

Job Summary

aPriori is looking for a GRC Analyst to support the development, implementation, and maintenance of our Governance, Risk, and Compliance (GRC) program. This role will report to the Information Security Manager and will work with the security team to build and deliver initiatives to increase aPriori’s information security posture. Various responsibilities will include policy creation, security training, risk assessments, compliance monitoring, and audit support.

The GRC Analyst will collaborate with internal teams, utilizing your experience to implement security frameworks, assess risks, and develop strategies to achieve and maintain compliance. The ideal candidate should have knowledge of regulatory requirements, risk management frameworks, and information security concepts and have familiarity with the ISO 27001 and SOC2 audit process.

• Assist with the ongoing development of the governance, risk, and compliance program to align with industry best practices, regulatory requirements, and compliance with SOC2 and ISO 27001.
• Develop and maintain information security policies, procedures, standards, and guidelines.
• Manage the Privacy Program, including compliance with GDPR, CCPA / CCRA, Privacy Shield, etc.
• Create and maintain data flow diagrams, network diagrams, and other illustrations as needed.
• Develop and deliver security awareness and training programs to educate employees on security policies, procedures, and best practices.
• Establish and support ongoing monitoring efforts to ensure compliance with internal policies, appropriate regulations, and contractual obligations.
• Support the development of Business Continuity and Disaster Recovery plans and related documents in accordance with industry standards and best practices.
• Collaborate with internal teams to perform risk assessments, identify potential threats and vulnerabilities, and support the development of risk mitigation strategies.
• Manage and maintain the risk register.
• Identify areas for process improvement within the GRC program and assist in implementing enhancements to improve effectiveness and efficiency.
• Develop an understanding of the processes related to identity and access management and ensure appropriate reviews are performed in accordance with policy.
• Support SOC2 compliance activities, including assessments, documentation, and working with third party auditors.
• Stay current with industry trends, emerging threats, and best practices in information security to ensure the organization remains proactive and well-prepared against potential risks.
• Foster a culture of security awareness and accountability throughout the organization.
• Contribute to and achieve business and departmental goals and objectives.

• 1-3+ years’ experience in a similar role, with a strong background in IT security, information assurance or related field.
• Proficient in documentation, including policy creation and data flow diagrams.
• In-depth knowledge of security frameworks, standards, and regulations (e.g., NIST, ISO 27001, SOC2, GDPR, etc).
• Experience with security tools and technologies, such as Whistic, Anecdotes, Meta Compliance, Great Horn, Proofpoint, etc.
• Strong analytical and problem-solving skills, with the ability to assess complex security issues and develop effective solutions.
• Excellent communication and interpersonal skills, with the ability to effectively communicate security-related concepts to technical and non-technical audiences.
• Ability to work independently with minimal supervision.
• Ability to prioritize tasks and projects to meet deadlines.
• Professional certifications are a plus.

• Hybrid working (2-3 days a week in the Belfast office)
• Competitive compensation
• Unique benefits including pension match, private medical & dental & vision, cycle-to- work scheme, flexible time off, aPriori days (4 additional days off per year), income protection and employee assistance program
• Employee engagement activities such as Festival events, Christmas party and volunteering days.
• A team environment where your experience is valued, your voice heard, and your work impacts our customers and employees.

Fou…