Sr. GRC (Governance, Risk, and Compliance) Analyst

Bloomin' Brands Restaurant Support Center•Tampa, FL

2d•Hybrid

About The Position

The Sr. GRC (Governance, Risk, and Compliance) Analyst will be involved in aiding in governance, risk management, and compliance (GRC) efforts. These duties will further the company’s strategic positioning with regards to risk management practices, assessment, audits and compliance certifications. This position is based in our Tampa, FL Restaurant Support Center and will work a hybrid schedule (mix of onsite and remote).

Requirements

Bachelor’s degree in business, Information Management, Computer Science, Data Analytics or a related field is required.
6 - 9 years of experience working in information security, risk management and compliance.
6 – 9 years of experience with IT auditing and risk analysis.
Understanding of common security standards and regulations (e.g., PCI DSS, SOX, SOC1, SOC2, ITGC, ISO2700x, etc.).
3 - 5 years managing security awareness training, testing and reporting
Excellent interpersonal, written, verbal and presentation skills, with the ability to effectively communicate and work with people at all levels of the company
Self-starter with exceptional project management and change management skills
Ability to work within a cross-functional team environment to collaborate with and influence business and technical stakeholders at all levels of the organization to achieve a desired result
Strong problem-solving and critical-thinking abilities with a keen attention to detail.
Strong knowledge of and experience in developing and implementing data governance policies, procedures, frameworks, and industry best practices.
Proficiency with Microsoft Office Suite, GRC tools in a hybrid cloud environment.

Nice To Haves

CISA, CISM, CRISC, CISSP, and/or PCIP preferred.

Responsibilities

Develop and implement effective and reasonable policies, procedures and practices to secure protected and sensitive data and ensure security and compliance with relevant legislation and legal interpretation.
Internally assess, evaluate, and make recommendations to management regarding the adequacy of security controls for information and technology systems.
Support the development and implementation of the system-wide risk management function of the information security program to ensure security risks are identified and monitored.
Conducts information security assessments of suppliers (third party vendors and cloud services) including advising management on how to mitigate any identified risks.
Performs third party compliance with risk tracking, trending, analysis, and executive reporting.