IT GRC Analyst

Pacific Market International • Seattle, WA

40d

About The Position

Join the Bear Force as a IT GRC Analyst , where you'll be at the forefront of defining how we manage risk, shape policy, and build a stronger, smarter IT ecosystem. We're seeking a hands-on, curious problem-solver who thrives on collaboration—partnering with IT and business teams to craft policies, strengthen controls, and keep our organization aligned with the highest standards of security and compliance.

Requirements

• A self-motivated and collaborative problem solver with ability to work in dynamic environment
• 3+ years' experience in Technical Security Governance, Compliance, Internal Audit in an IT environment
• Experience in using Microsoft Purview and GRC tool such as OneTrust
• Prior working with developing compliance metrics and KPIs
• Familiarity with industry best practices such as Common Vulnerability Scoring System (CVSS), ISF and regulatory compliance frameworks (NIST CSF, ISO27001, PCI, HIPAA)
• Proficiency in global privacy regulation encompassing GDPR, CCPA, PIPA, etc.
• Technical knowledge and understanding of infrastructure, including network segmentation, Zero Trust architecture, Identity and Access Management, CIS Benchmarks, Network Security, and Vulnerability Management
• Verbal and written communication skills strong enough to distill the above for a non-technical audience
• Experience developing business continuity program/s
• Possession of certifications such as CISA, CISM, CIPP, CISSP or other relevant certifications

Responsibilities

• Design and drive risk assessment activities.
• Understand, assess, and formally articulate Security Risks, and develop Standards, Guidelines, and Policy
• Create and maintain relationships with key business, Legal, People, IT and other partners throughout the company, while advancing our agenda for standards-backed security practices
• Partner with stakeholders in Supply Chain, IT, Security, Legal, and Operations to develop and implement a Business Continuity Program
• Drive remediation action plans to ensure they are designed appropriately to mitigate security/privacy risks
• Support business and product release commitments by driving risk identification, mitigation and acceptance for unmitigated security risks with key partners in and outside of IT
• Consult with business or security partners on information security requirements and applicability to business processes, products, or services
• Focus on continuous improvement of operational processes and designing innovative and automated operational functionality - we're looking for someone who can help us level up

Benefits

• Stanley is a total rewards company, which includes rewards beyond base salary.
• At Stanley, full-time employees are eligible for an annual bonus, based on company and individual results.
• In addition, we offer a variety of employee benefits, personalized time off, 14-Paid holidays, dental, vision, 401(k), and much more.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed
• Number of Employees: 501-1,000 employees