GRC Risk Management Analyst

GRC Risk Management Analyst

Our client, a leading organization in the technology and security sector, is seeking a dedicated and detail-oriented GRC Risk Management Analyst to join their team. As a GRC Risk Management Analyst, you will play a vital role in supporting information security and third-party risk management initiatives. The ideal candidate will demonstrate strong analytical skills, proactive communication, and a passion for enhancing organizational security posture, fostering an inclusive environment where diverse talents thrive.

Job Title:

Cyber Security Analyst 2

Location:

San Jose, CA

What's the Job?

• Conduct comprehensive third-party risk assessments, including due diligence, control evaluation, and ongoing monitoring throughout the vendor lifecycle.
• Administer risk-based vendor questionnaires, review responses, identify gaps, and translate findings into actionable risk ratings and remediation plans.
• Maintain and update enterprise and vendor risk registers with accurate risk statements, ratings, owners, and treatment strategies.
• Analyze security, privacy, resilience, and regulatory risks based on business criticality and data sensitivity.
• Perform technical risk analysis by reviewing system architecture, data flows, cloud configurations, and security controls, ensuring design intent aligns with operational effectiveness.

What's Needed?

• Bachelor's degree in Information Security, Risk Management, Business, Computer Science, or a related field.
• 1-4 years of experience in enterprise risk, third-party risk, GRC, or information security roles.
• Knowledge of inherent and residual risk, controls, and risk treatment processes.
• Technical understanding of enterprise and cloud environments, including networking, identity management, encryption, and vulnerability management.
• Strong analytical, organizational, stakeholder management, and communication skills, with proficiency in Microsoft Office and familiarity with GRC or automation tools.

What's in it for me?

• Opportunity to work in a dynamic, inclusive environment that values diverse perspectives.
• Engagement with cutting-edge security technologies and practices.
• Chance to develop your skills in analytics, automation, and AI-assisted workflows.
• Supportive team environment fostering professional growth and continuous learning.
• Work on impactful projects that enhance organizational security and compliance.

Upon completion of waiting period consultants are eligible for:

• Medical and Prescription Drug Plans
• Dental Plan
• Vision Plan
• Health Savings Account
• Health Flexible Spending Account
• Dependent Care Flexible Spending Account
• Supplemental Life Insurance
• Short Term and Long Term Disability Insurance
• Business Travel Insurance
• 401(k), Plus Match
• Weekly Pay