GRC Analyst

American Tower Africa•Boston, MA

11h

About The Position

The GRC Analyst is a member of the Information Security – Governance, Risk and Compliance team. The role focuses on implementing and maintaining governance frameworks, managing risk remediation activities, and ensuring adherence to regulatory and internal security standards. The incumbent oversees requirements gathering and documentation for the Identity and Access Management (IAM) implementation, administers GRC-related inquiries from cross-functional business teams, and assists with the oversight and maintenance of policies and standards.

Requirements

At least 2 years of experience in Governance, Risk, and Compliance (GRC) or Information Security.
Strong organization, planning, and project management skills, including the ability to prioritize tasks to meet requirements and deadlines.
Ability to work effectively and professionally with different functional groups and employee levels.
Excellent written and verbal communication skills and ability to interact with internal and external parties.
Ability to work independently and in cross-functional teams.
Strong computer skills, including Microsoft Office Suite and Oracle.
Knowledge of access, security, and risk assessment methods and technologies.
Knowledge of Information Security Standards such as ISO 27001/27002 and ITIL.
Knowledge of data privacy and compliance regulations such as MA CMR 201, HIPAA, and Red Flag.

Nice To Haves

Bachelor’s degree in Information Security, Cybersecurity, Risk Management, or equivalent work experience preferred.
Experience conducting requirements-gathering sessions and documentation, including data analysis.
Experience developing, documenting, and maintaining access and security policies, processes, procedures, and standards.

Responsibilities

Act as a liaison between IT and business units to support the development and implementation of governance policies, standards, frameworks, and tools aligned with organizational objectives.
Support requirements gathering and documentation for information security projects and programs, including arranging and leading meetings to clarify requirements and workflows and identify solutions.
Manage GRC ticket maintenance and provide guidance to stakeholders on GRC topics.
Monitor and maintain risk remediation activities, ensuring compliance issues are addressed, risks are documented, and exceptions are tracked in accordance with established frameworks and standards.
Provide guidance and training to stakeholders on governance, risk, and compliance topics to enhance awareness and adherence to processes.
Engage constructively with business partners on information security governance and compliance concerns, offering actionable recommendations for improvement.
Assist with developing security architecture and security policies, principles, and standards.
Research and stay up to date on access security issues.
Perform other duties as assigned.