Security GRC Analyst II

Location: Broomfield

Corporate At ZOLL, we're passionate about improving patient outcomes and helping save lives. We provide innovative technologies that make a meaningful difference in people's lives. Our medical devices, software and related services are used worldwide to diagnose and treat patients suffering from serious cardiopulmonary and respiratory conditions.

Job Type Remote Job  Description The GRC Analyst II independently executes governance, risk, compliance, and security assurance activities that support the organization's operational, regulatory, and strategic objectives. This role coordinates risk assessments, compliance reviews, policy governance, audit activities, data protection initiatives, and issue remediation efforts. The analyst partners with business, technology, legal, quality, privacy, and security stakeholders to strengthen governance frameworks, manage risks, and support organizational resilience.

ZOLL Medical does not provide immigration-related sponsorship for this role. Do not apply for this role if you will need ZOLL immigration sponsorship (e.g. H1B, TN, STEM, OPT, etc.) either now or in the future.

Essential Functions Governance & Compliance
• Develop and maintain policies, standards, and control documentation.
• Coordinate compliance assessments and regulatory readiness activities.
• Manage governance repositories and documentation.
• Support control framework implementation and maturity initiatives.

Risk Management
• Conduct risk assessments and control evaluations.
• Track and report identified risks and remediation activities.
• Perform third-party and operational risk reviews.
• Support enterprise risk reporting activities.

Audit & Assurance
• Coordinate audit responses and evidence collection.
• Perform control testing and assessments.
• Support remediation validation activities.
• Assist with regulatory examinations.

Data Protection & Security Oversight
• Evaluate effectiveness of security and data protection controls.
• Review data governance and classification practices.
• Support incident investigations involving sensitive data.
• Assess compliance with data protection requirements.

Security Awareness
• Lead or support security awareness campaigns and communications.
• Monitor training completion metrics.
• Assist employees with governance and compliance questions.
• Report on Security Metrics Required/Preferred

Education and Experience Bachelor's Degree in cybersecurity, IT, or a related field5+ years in cybersecurity with a focus on data protection or governance

Knowledge, Skills, and Abilities (KSAs)
• Understanding of ISO 27001, NIST, HIPAA, PCI DSS, GDPR, and related frameworks.
• Knowledge of risk management methodologies.
• Strong analytical and problem-solving skills.
• Excellent cross-collaboration skills and customer service
• Effective stakeholder management abilities.
• Experience with GRC platforms and governance tools.
• Administrative experience with Security Training and Phishing Tools
• Strong written and verbal communication skills.

Travel Requirements Up to 10%
Physical Demands The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job.

Standing
- Occasionally Walking
- Occasionally Sitting
- Constantly Talking
- Occasionally Hearing
- Occasionally Repetitive Motions
- FrequentlyZOLL is a fast-growing company that operates in more than 140 countries around the world. Our employees are inspired by a commitment to make a difference in patients' lives, and our culture values innovation, self-motivation and an entrepreneurial spirit. Join us in our efforts to improve outcomes for underserved patients suffering from critical cardiopulmonary conditions and help save more lives.

ZOLL Medical…