GRC Analyst

Job Description

• The Governance Analyst will be responsible for assisting in the responsibilities of executing the security framework compliance/governance activities and requirements.
• Day-to-day responsibilities will also include documenting adherence to governance requirements across policies/standards, procedures, controls, compliance, training and awareness, and preparing metrics/KPIs and reporting materials.
• Required to be Onsite as per the client need
• Inperson Interview Required

Required Skills:

• At least three to five years of work experience in IT compliance, IT Assessments, and/or IT audit experience as well as knowledge and understanding of governance, risk, compliance
• Knowledge of security and risk frameworks, standards, best practices (e.g., HITRUST CSF, NIST CSF, ISO/IEC 27001, COBIT)
• Evaluate the design and operation effectiveness of Business/IT operations against the HITRUST CSF and identify areas of improvement
• Interview SMEs, examine evidence documentation, analyze and perform testing
• Learn the company functions/processes by conducting process walk throughs
• Collaborate with cross-functional teams to mitigate risks and ensure compliance with HITRUST CSF
• Deliver effective and concise documentation that meets HITRUST quality standards
• Prepare and provide reporting such as dashboards and metrics, on various areas of performance, issue analysis and assessment statuses
• Utilize GRC tools to effectively manage assessment remediation plans and documentation
• Serve as a HITRUST subject matter expert

EEO Employer
Lance Soft is a certified Minority Business Enterprise (MBE) and an equal opportunity employer. We prohibit discrimination and harassment of any kind based on race, color, sex, religion, sexual orientation, national origin, disability, genetic information, pregnancy, or any other protected characteristic as outlined by federal, state, or local laws.
This policy applies to all employment practices within our organization, including hiring, recruiting, promotion, termination, layoff, recall, leave of absence, compensation, benefits, training, and apprenticeship. Lance Soft makes hiring decisions based solely on qualifications, merit, and business needs at the time.