Governance, Risk, and Compliance Analyst

Governance, Policy & Audit Support:

• Maintain governance policies and standards for technology, privacy, and information management.
• Support internal and external audits with evidence and documentation.
• Coordinate compliance initiatives and track remediation activities.

Risk & Vendor Management:

• Conduct risk assessments for new technologies, vendors, and operational changes.
• Perform security, privacy, and compliance reviews of third-party vendors.
• Support vendor onboarding and contractual compliance.

Data Governance & Privacy:

• Evaluate new technologies and AI solutions for privacy and governance considerations.
• Maintain data inventories, classification, and retention documentation.
• Advise stakeholders on appropriate data collection, use, and protection.

Monitoring & Continuous Improvement:

• Manage the monthly cybersecurity awareness training program.
• Perform regular audits of user access, permissions, and IT assets.
• Conduct periodic compliance reviews and track corrective actions.