GRC Compliance Senior Analyst
About The Position
The GRC Compliance Senior Analyst supports information security, risk, and compliance activities across business applications, IT/OT services, and manufacturing sites. The role ensures solutions are designed, developed, and operated in accordance with organizational security standards, regulatory requirements, and governance frameworks. The analyst drives continuous improvement of security compliance programs, strengthens risk management practices, and maintains audit and inspection readiness. The position is based in Durham, North Carolina, with a hybrid schedule requiring three days per week in the office. The internal job title is Sr. Spec. DDIT ISC Operations.
Requirements
- Over 8 years of experience in business information security and compliance, IT risk management, audit management, information governance and management, or GRC.
- University degree in a business, technical, or scientific area, or comparable education/experience.
- Extensive experience efficiently managing risks, vulnerabilities, and issues within a function.
- Disciplined approach to managing functional and operational risks.
- Experience engaging successfully with stakeholders and advocating for information security compliance activities.
- Demonstrated ability to collaborate effectively and build successful partnerships with stakeholders, vendors, support teams, and internal cross-functional teams.
- Experience with Good Practice Quality guidelines and regulations (GxP).
- Strong stakeholder management skills, including with senior business executives and IT Site Heads.
- Excellent written and spoken English communication skills.
Nice To Haves
- Experience with OT security compliance and implementing policies in a manufacturing environment, ideally in pharma.
- AI knowledge and experience.
- Professional information security certification, such as ISACA CISM, CRISC, or CISA, and/or ISC2 CISSP or CCSP.
Responsibilities
- Provide information security governance and risk advice and support for Operations IT and OT, and oversee a specific governance/risk area globally.
- Ensure IT/OT project risks are managed in line with information security strategy, policy frameworks, laws and regulations, and industry standards.
- Monitor information risk and proactively mitigate issues.
- Support risk-based treatment of threats, issues, and vulnerabilities.
- Guide teams in understanding risk exposure and technical safeguards.
- Deliver global information governance programs, including risk management, data classification, storage and transmission guidelines, and audit readiness support.
- Maintain knowledge of internal controls and internal risk and control frameworks, standards, and the Information Management Policy Framework; systematically support their implementation and monitoring.
- Provide KPI reporting and dashboards, and drive continuous improvements to ensure compliance.
- Analyze the impact of new technologies and regulatory changes on information security, including cybersecurity and data privacy acts, laws, and regulations.
- Communicate and collaborate with DDIT Operations Service Delivery Teams and other support partners.
- Share ideas proactively and seek to deliver business value.
- Use AI and automation to streamline compliance activities, including risk assessments, control documentation, testing, issue management, and audit support.
Benefits
- Performance-based cash incentive.
- Depending on role level, eligibility to be considered for annual equity awards.
- Health, life, and disability benefits.
- 401(k) with company contribution and match.
- Vacation, personal days, holidays, and other leaves.
- A variety of other benefits.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
