Senior Governance, Risk, and Compliance; GRC Process Analyst

Position: Senior Governance, Risk, and Compliance (GRC) Process Analyst
** Job Description*
* At Boeing, we innovate and collaborate to make the world a better place. We're committed to fostering an environment for every teammate that's welcoming, respectful and inclusive, with great opportunity for professional growth. Find your future with us.

Boeing is seeking a detail-oriented and analytical  
** Senior*
* ** Governance, Risk, and Compliance (*
* ** GRC) Process Analyst
** to support governance, risk, and compliance initiatives for Infrastructure team at our  
** Mesa, AZ;
Dallas, TX;
Colorado Springs, CO;
Fort Walton Beach, FL;
Jacksonville, FL;
Miami, FL;
North Charleston, SC;
Ridley Park, PA;
Portland, OR;
Salt Lake City, UT;
San Antonio, TX;
Seal Beach, CA;
Seattle, WA; or Berkeley, MO.*
* The ideal candidate will have experience in SOX compliance, vulnerability management coordination, risk assessments, security controls validation, and corporate/internal audit support.

This role will partner with Information Security, IT&O, Internal Audit, Compliance, SOX, External Audit, and Business stakeholders to ensure compliance with regulatory requirements, strengthen security posture, and maintain effective internal controls.

*
* Position Responsibilities:

*
* + Support the organization's GRC framework, policies, standards, and procedures

+ Conduct risk assessments and maintain enterprise risk registers.

+ Identify, assess, and track remediation of technology and cybersecurity risks

+ Assist in third-party/vendor risk assessments and compliance reviews

+ Monitor compliance with internal policies and regulatory requirements

+ Support ITGC (IT General Controls) and SOX compliance activities

+ Coordinate control testing, evidence collection, and remediation tracking

+ Work with control owners to ensure Design effectiveness and operational effectiveness of SOX controls

+ Assist during external and internal SOX audits

+ Maintain documentation for SOX controls, narratives, and process flows

+ Coordinate vulnerability management activities with infrastructure teams

+ Track remediation of identified vulnerabilities and security findings.

+ Support periodic access reviews and security compliance assessments

+ Act as liaison between IT/Security teams and Internal/External Auditors

+ Prepare audit evidence and coordinate audit requests.

+ Track audit findings and remediation plans through closure

+ Assist with audit readiness initiatives and continuous monitoring activities

+ Develop dashboards, metrics, and compliance reports for management

+ Maintain accurate documentation for risks, controls, findings, and remediation efforts

+ Support policy and procedure reviews and updates

+ Support automation for SOX controls by identifying the scope and recommend all possible options for automation

+ Directs activities to define, deploy, evaluate and support common computing standards, IT processes, tools and process/performance metrics

+ Leads activities to define plans to support common standards and processes. Identifies qualitative and quantitative improvement measures

+ Advises on the selection of key parameters and standards to monitor progress. Leads the definition, development and deployment of common process requirements and infrastructure products and services

+ Directs activities to educate and promote use of Boeing IT common processes, methodologies, products and services.

+ Leads, consults and coaches in common processes for software development and maintenance

+ Leads the review and evaluation of new technology for software process impact. Supports and integrates architecture mapping to common processes

** Basic Qualifications (Required skills/experience)** :

+ 5+ years of experience in Governance, Risk, and Compliance (GRC), Information Technology (IT) Audit, Information Security, vulnerability management, and Compliance

+ 5+ SOX ITGC, Security Controls, Vulnerability Management processes, Audit lifecycle and compliance practices

+ 3+

Experience with Governance, Risk, and Compliance (GRC) tools such as Service Now GRC, Audit Board, and CAIRO

+ 3+ years with infrastructure experience including network, database, operating systems, IAM, change management, and periodic reconciliations

+ 3+ years of industry…