GRC Analyst

GRC Program Ownership:

• Own and improve the GRC program across multiple standards, including control mapping and evidence expectations.
• Partner with control owners to make compliance repeatable and drive audit readiness with clear action tracking.

Technical-to-Compliance Translation:

• Build strong working relationships with DevOps/Platform and engineering teams to evaluate technical implementations.
• Translate technical reality into clear audit narratives, asking good questions and validating evidence accurately.

Risk Management:

• Contribute to risk identification and assessment across technical, operational, and vendor domains.
• Maintain risk registers, track mitigations, and support leadership reporting by surfacing trends for decision-making.

Growth into Future Certifications:

• Evaluate and prepare for future standards like ISO 22301, HITRUST, and FedRAMP as business needs evolve.
• Identify gaps early and propose pragmatic roadmaps that engineering teams can execute.