GRC Analyst

Ovise is exclusively partnered with one of the largest restaurant and franchisee brands in the world They are looking to build out their GRC function, and as a GRC analyst, you will be directly involved with this initiative.

The GRC Analyst will be responsible for assessing, managing, and mitigating risks related to an organization's information assets. This role involves conducting risk assessments, developing risk management strategies, and ensuring compliance with regulatory requirements.

Key Responsibilities:

• Conducting risk assessments to identify and evaluate potential threats and vulnerabilities to the organization's information assets.
• Developing and implementing risk management strategies to mitigate identified risks.
• Ensuring compliance with relevant governance frameworks and standards (e.g., ISO 27001, NIST Cybersecurity Framework).
• Monitoring compliance with regulatory requirements and industry best practices.
• Preparing reports on risk assessments, mitigation strategies, and compliance status.
• Conducting ongoing monitoring of the organization's risk posture and identifying emerging threats.

Qualifications:

• 3-5 years relevant experience.
• Strong understanding of risk management concepts and methodologies.
• Knowledge of governance frameworks and standards.
• Strong analytical and problem-solving skills.
• Keen attention to detail.
• Excellent written and verbal communication skills.
• Ability to work independently and as part of a team.
• Certifications such as Certified Information Systems Security Professional (CISSP), Certified Risk Manager (CRM), or Certified Information Systems Auditor (CISA) can be beneficial for this role.