Senior Compliance Analyst-GRC

Candidate Specification& Job Responsibilities:

• Candidate should have 5+ Years of experience in IT GRC, Information security governance, enterprise risk management, IT risk management, External/ Internal audit management, vendor risk management, compliance monitoring, gap analyses.
• Evidence Lifecycle Management Lead the collection, validation, and organization of audit evidence.
• Perform recurring test audits of internal controls to ensure they remain effective between formal audits.
• Audit Liaison Act as the primary point of contact for external auditors.
• Coordinate with internal stakeholders to ensure timely delivery of evidence.
• Policy and Awareness Stay informed on current frameworks or regulatory requirements.
• Identify control gaps when updates to frameworks or regulatory requirements are introduced.
• Drive compliance remediation efforts.
• Create and maintain documentation of our compliance.
• Map evidence across multiple frameworks.
• Vendor Risk Management Evaluate the security and compliance posture of third-party vendors to ensure they meet EMS|MC's security and compliance requirements.
• Perform annual re-evaluations of vendors.
• Provide recommendations regarding leadership third-party vendors security and compliance posture.
• Update IT-security risk registry, as necessary.
• Perform other duties as assigned.
• Candidate should be flexible working in any shifts.