IT GRC Analyst 3

NuScale Power • Houston, TX

16d • $99,175 - $119,694 • Onsite

About The Position

Reporting to the Manager, IT Compliance, this position will be responsible for supporting the organizations governance, risk management, and compliance initiatives. This role involves identifying, assessing, and mitigating risks while ensuring compliance with policies, regulatory requirements, and industry standards. The IT GRC analyst collaborates with internal and external teams to maintain and improve the implementation of industry frameworks and standards, support audits, and develop business processes. This position will assist in the performance of routine audit activities such as quarterly user access reviews, risk registry maintenance, and documentation updates.

Requirements

• A Bachelor’s degree in Computer Science, Business Information Systems, Cybersecurity, or related field is required. Alternatively, 4 additional years (9 years total) of full-time, directly relevant working experience may be considered in lieu of a 4-year degree
• A minimum of 5 years of full-time working experience in IT environment with at least 2 of those years specific to audit, compliance, risk management, or security.
• Hands on work with risk assessment, control testing, risk management, and policy development.
• Eligible to work under Department of Energy 10 CFR Part 810.

Nice To Haves

• Knowledge of software used in the performance of GRC activities such as Oracle RMC, Azure identity governance, privileged access management, user access reviews, and model-based system engineering are preferred.

Responsibilities

• Policy and procedure development for IT General Controls and related functions
• Framework alignment of COSO, NIST, ISO, & ITIL to ITGCs in support of Sarbanes-Oxley (SOX)
• Reporting and communication of ITGC compliance status to management
• Stakeholder coordination during development and updates of IT controls
• Risk assessment support
• Control development, testing, and monitoring
• Issue tracking and remediation
• Risk register maintenance
• Regulatory compliance tracking
• Audit support
• Training and awareness
• Compliance testing
• Performs other duties as assigned.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 251-500 employees