GRC Analyst

Ecolab•Saint Paul, MN

About The Position

The GRC Analyst – Assurance Operations Coordinator serves as the individual-contributor lead for assurance operations coordination, owning audit logistics, evidence workflows, and stakeholder alignment to ensure timely, auditor-ready outcomes. This role provides execution leadership across audits and assessments by managing evidence collection processes, coordinating auditor interactions, and driving structured follow-up for issued findings. This position owns the process and workflow for audit and assessment findings follow-up, driving visibility, cadence, and escalation to ensure findings progress to timely closure. The role does not identify findings or perform remediation actions, but is accountable for monitoring progress, identifying risks to closure, and escalating issues through defined governance paths. As needed, the role also supports SOX-related audit coordination activities by assisting with evidence routing and issue resolution.

Requirements

Bachelor’s degree or equivalent relevant experience.
5 years of professional experience
Must have prior experience at an Ecolab location (contractor, temp, or employee)
Demonstrated experience in GRC role working on project or program coordination, audit support, or assurance operations roles.
Strong ability to manage timelines, dependencies, and stakeholder communications across multiple concurrent efforts.
Proven organizational and documentation skills with a high attention to detail.
No immigration sponsorship available for this position.

Nice To Haves

Familiarity with SOC 2 and other assurance frameworks, including controls, evidence, PBC lists, and walkthroughs.
Ability to translate audit and control requirements into clear, actionable tasks for technical and business teams.
Experience using collaboration and tracking tools (e.g., Excel or Lists, SharePoint/Teams, ticketing systems).
Clear, professional communication skills when working with engineers, control owners, auditors, and leadership.
Experience operating in a complex, matrixed enterprise or regulated environment.

Responsibilities

Act as the operational lead for assurance activities, including maintaining PBC lists, request assignments, due dates, and evidence repository structures.
Drive execution of evidence requests by routing requests to designated owners, tracking responses, and ensuring delivery timelines are met.
Perform first-level evidence checks for completeness and organization (presence, clarity, timestamps, versioning), without performing control testing or effectiveness validation.
Coordinate audit logistics, including walkthrough scheduling, auditor Q&A routing, follow-ups, and collection of management responses as required.
Ensure consistency, traceability, and audit-readiness of evidence libraries across SOC 2 and other assurance engagements.
Own the findings follow-up workflow for issued findings across IT audits, risk assessments, and other assurance engagements.
Manage post-issuance findings lifecycle activities, including intake, owner assignment, milestone definition, status tracking, and closure readiness.
Drive ongoing status monitoring through recurring check-ins and progress reviews with remediation owners.
Identify delays, blockers, or risks to timely closure and proactively escalate through established governance and leadership channels.
Coordinate re-test readiness and closure packages (evidence, narratives, tickets, approvals) once remediation owners indicate completion.
Maintain accurate, up-to-date reporting on open findings, aging, trends, and risk themes for leadership and audit stakeholders.
Provide supplemental coordination support for SOX-related assurance activities, as required.
Assist with routing evidence requests, tracking auditor follow-ups, and addressing documentation gaps for in-scope controls.
Act as a coordination point for unresolved SOX-related issues that require escalation or cross-team alignment.