Senior Governance, Risk, and Compliance Process Analyst

Responsibilities

• Support the organization’s GRC framework, policies, standards, and procedures
• Conduct risk assessments and maintain enterprise risk registers
• Identify, assess, and track remediation of technology and cybersecurity risks
• Assist in third‑party/vendor risk assessments and compliance reviews
• Monitor compliance with internal policies and regulatory requirements
• Support ITGC (IT General Controls) and SOX compliance activities
• Coordinate control testing, evidence collection, and remediation tracking
• Work with control owners to ensure Design effectiveness and operational effectiveness of SOX controls
• Assist during external and internal SOX audits
• Maintain documentation for SOX controls, narratives, and process flows
• Coordinate vulnerability management activities with infrastructure teams
• Track remediation of identified vulnerabilities and security findings
• Support periodic access reviews and security compliance assessments
• Act as liaison between IT/Security teams and Internal/External Auditors
• Prepare audit evidence and coordinate audit requests
• Track audit findings and remediation plans through closure
• Assist with audit readiness initiatives and continuous monitoring activities
• Develop dashboards, metrics, and compliance reports for management
• Maintain accurate documentation for risks, controls, findings, and remediation efforts
• Support policy and procedure reviews and updates
• Support automation for SOX controls by identifying the scope and recommending all possible options for automation
• Direct activities to define, deploy, evaluate and support common computing standards, IT processes, tools and process/performance metrics
• Lead activities to define plans to support common standards and processes
• Identify qualitative and quantitative improvement measures
• Advise on the selection of key parameters and standards to monitor progress
• Lead the definition, development and deployment of common process requirements and infrastructure products and services
• Direct activities to educate and promote use of Boeing IT common processes, methodologies, products and services
• Lead, consult and coach in common processes for software development and maintenance
• Lead the review and evaluation of new technology for software process impact
• Support and integrate architecture mapping to common processes

• 5+ years of experience in Governance, Risk, and Compliance (GRC)
• 5+ SOX ITGC, Security Controls, Vulnerability Management processes
• 3+ Experience with Governance, Risk, and Compliance (GRC) tools such as Service Now GRC, Audit Board, and CAIRO
• 3+ years with infrastructure experience including network, database, operating systems, IAM, change management, and periodic reconciliations
• 3+ years of industry security standards experience, such as NIST, ISO 27001, COBIT, and OWASP
• 3+ years in risk management
• 3+ years in root cause corrective analysis
• 5+ years of managing multiple competing priorities
• 5+ years of experience in consulting or in a strategic role that influences the business

• Governance, Risk, and Compliance (GRC)
• SOX ITGC
• Security Controls
• Vulnerability Management
• Risk Management
• Root Cause Corrective Analysis
• Audit Evidence Preparation
• Control Testing
• Documentation for SOX Controls
• Automation for SOX Controls

• Leadership
• Consulting
• Coaching
• Organizational Skills
• Communication
• Prioritization
• Collaboration
• Analytical Skills
• Problem Solving
• Influencing