Security GRC Analyst II
About The Position
The GRC Analyst II independently carries out governance, risk, compliance, and security assurance activities in support of ZOLL’s operational, regulatory, and strategic objectives. The role coordinates risk assessments, compliance reviews, policy governance, audit activities, data protection initiatives, and issue remediation. It partners with business, technology, legal, quality, privacy, and security stakeholders to strengthen governance frameworks, manage risks, and support organizational resilience. The position is remote and may require travel up to 10%. ZOLL does not provide immigration-related sponsorship for this role. The annual salary range is $102,900 to $135,000; starting pay may depend on geography, skills, education, experience, and other qualifications. Applications are accepted on an ongoing basis until the position is filled. ZOLL is an Equal Opportunity Employer and will make reasonable accommodations in compliance with the ADA.
Requirements
- Bachelor’s degree in cybersecurity, IT, or a related field.
- Five or more years in cybersecurity, with a focus on data protection or governance.
- Understanding of ISO 27001, NIST, HIPAA, PCI DSS, GDPR, and related frameworks.
- Knowledge of risk management methodologies.
- Strong analytical and problem-solving skills.
- Excellent cross-collaboration skills and customer service.
- Effective stakeholder management abilities.
- Experience with GRC platforms and governance tools.
- Administrative experience with security training and phishing tools.
- Strong written and verbal communication skills.
Responsibilities
- Develop and maintain policies, standards, and control documentation.
- Coordinate compliance assessments and regulatory readiness activities.
- Manage governance repositories and documentation.
- Support control framework implementation and maturity initiatives.
- Conduct risk assessments and control evaluations.
- Track and report identified risks and remediation activities.
- Perform third-party and operational risk reviews.
- Support enterprise risk reporting activities.
- Coordinate audit responses and evidence collection.
- Perform control testing and assessments.
- Support remediation validation activities.
- Assist with regulatory examinations.
- Evaluate the effectiveness of security and data protection controls.
- Review data governance and classification practices.
- Support incident investigations involving sensitive data.
- Assess compliance with data protection requirements.
- Lead or support security awareness campaigns and communications.
- Monitor training completion metrics.
- Assist employees with governance and compliance questions.
- Report on security metrics.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
