GRC Analyst - Temp

Aeg • Los Angeles, CA

96d • $95,000 - $110,000

About The Position

The GRC Analyst will support the continued evolution of AEG's Governance, Risk & Compliance program with a focus on helping to mature the Enterprise Risk Management (ERM) function. This role will assist in identifying, measuring, and documenting risks across business units, ensuring consistent updates to the enterprise risk register, and supporting leadership visibility into key risk themes. In addition to ERM activities, the GRC Analyst will contribute to compliance assessments, audit readiness, and the integration of risk management into projects, third-party oversight, and security awareness initiatives. This is a hands-on role requiring strong organizational skills, attention to detail, and the ability to collaborate across IT, Operations, Legal, Finance, and other global business functions.

Requirements

• BA/BS Degree in Information Security, Computer Science, Business, Risk Management, or related field; or equivalent related work experience.
• 2-4 years experience in GRC, compliance, or risk-related roles, ideally in complex/global environments.
• Familiarity with ERM concepts (risk taxonomy, appetite/tolerance, inherent/residual risk).
• Working knowledge of compliance frameworks (NIST, ISO 27001, PCI-DSS, GDPR/CPRA).
• Ability to analyze and present risk/control data in business-friendly terms.
• Proficiency with GRC platforms (Archer, ServiceNow GRC, OneTrust, LogicGate) and Microsoft O365.
• Strong written/verbal communication; able to collaborate across functions.
• Highly organized, self-starter, able to manage competing priorities across regions and time zones.

Nice To Haves

• CISSP Certified Information Systems Security Professional highly preferred.
• CISM - Certified Information Security Manager preferred but not required.
• Certified Information Systems Auditor (CISA) preferred but not required.
• CompTIA Security+ Certification a plus.

Responsibilities

• Maintain the enterprise risk register; support cross-business risk workshops; document risks, causes, and controls; help track inherent vs. residual risk and remediation progress.
• Configure and maintain risk fields in the GRC platform (e.g., Archer, ServiceNow GRC, OneTrust, LogicGate).
• Map risks to policies/standards and controls; attach evidence links and test results.
• Create remediation tasks, owners, SLAs in the GRC workflow; monitor burn down, due date slippage, and inherent to residual deltas.
• Develop and refine reports, metrics, and dashboards; prepare materials for quarterly Risk Committee meetings.
• Plan and execute compliance assessments (NIST CSF/800-53, ISO 27001, PCI-DSS).
• Maintain policies/standards by drafting new policies, reviewing existing ones, and publishing updates.
• Support internal/external audits with evidence collection.
• Partner with the IT Vendor Management team to integrate vendor risks into the register.
• Lead GRC platform updates; workflows, data integrity optimization, and dashboard maintenance.
• Create awareness materials and quick guides translating top enterprise risks into micro-learnings.

Benefits

• Medical, dental and vision insurance.
• Paid holidays, vacation and sick time.
• Company paid basic life insurance.
• Voluntary life insurance.
• Parental leave.
• 401k Plan (with a current employer match of 3%).
• Flexible spending and health savings account options.
• Wellness offerings.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level
• Industry: Professional, Scientific, and Technical Services
• Education Level: Bachelor's degree