GRC Analyst (Governance) - Global Industrial

Genuine Parts Company•Atlanta, GA

About The Position

Under general supervision, the Governance, Risk & Compliance (GRC) Analyst II supports Motion's GRC functions, which may include Privacy, Compliance, Risk Management, Third-Party Risk, Governance, or Attack Surface Management. The analyst executes day-to-day GRC activities within an assigned domain and reports to the GRC Lead. The role covers vulnerability and external attack-surface management, information security governance, security awareness, compliance, privacy operations, and IT and third-party risk activities. The position also contributes to audits, assessments, remediation tracking, stakeholder coordination, and GRC reporting.

Requirements

Typically requires a bachelor's degree in computer science, software engineering, or a related field, and 3 to 5 years of related experience, or an equivalent combination.
Strong analytical, organizational, and documentation skills.
Excellent written and verbal communication skills.
Ability to work independently in a lean team environment.
Detail-oriented and self-directed.
Familiarity with GRC tooling or platforms.
Experience in a framework relevant to the assigned functional area.

Nice To Haves

Relevant certification or progress toward certification.

Responsibilities

Monitor vulnerability scanning results and maintain visibility into Motion's external attack surface.
Track and prioritize vulnerabilities for remediation in partnership with IT Operations and Application Development.
Own vulnerability management reporting and metrics, and administer scanning tools.
Drive remediation service-level agreements and escalate cross-team blockers as needed.
Develop, maintain, and periodically review information security policies and standards.
Own the IT Security Awareness program, including content updates and tracking stakeholder participation.
Manage policy exceptions and the exception and acceptance process.
Represent Governance in cross-team initiatives and audits.
Support compliance activities across pertinent platforms.
Support Operational Technology (OT) compliance efforts in partnership with the Cyber Defense Engineering & Architecture team.
Manage privacy notices, cookie compliance, and consent and preference management across digital properties.
Support privacy program operations, including identifying gaps and tracking remediation.
Assist with Privacy Impact Assessments (PIAs) and Data Privacy Impact Assessments (DPIAs).
Manage intake and processing of Data Subject Access Requests (DSARs).
Assist with compliance audits and assessments, including coordinating evidence.
Produce privacy and compliance metrics and reporting data for the Lead, and support development of privacy training and awareness content.
Maintain and update the cyber risk register and track security issues through remediation, following up with control owners on outstanding items.
Support IT risk assessments and third-party/vendor risk assessments, including periodic reviews and quality assurance of risk documentation.
Track and communicate risk exceptions and remediation action plans to stakeholders.
Collaborate with business partners and vendor stakeholders to identify opportunities to improve risk processes.
Maintain awareness of relevant risk frameworks and standards.