SENIOR ASSOCIATE - GRC - Risk management

Role Overview: As a GRC Analyst, you will be a vital member of the Governance, Risk, and Compliance team within the Global Information Security group. Your role will involve contributing to a security policy program and its related security policy exceptions process. You will have the opportunity to make a significant impact on cybersecurity goals, collaborate with diverse teams across the company, and engage with external customers, suppliers, and partners. Your responsibilities will include encouraging a security-first culture within the organization and utilizing innovative tools and technologies to protect global operations. Your contributions will be instrumental in achieving cybersecurity objectives. Key Responsibilities: - Maintain and continually improve the cybersecurity Policies Program. - Handle the lifecycle of policies, security standards, and technical security requirements from document creation to publication. - Prepare communication materials for go-to-market efforts. - Process and evaluate risk exceptions to Security Policies, Standards, and Technical Security Requirements. - Collaborate with business requestors to ensure identified risks are proactively addressed through mitigation and remediation. Qualifications Required: - 3+ years of consistent track record in the information security field with expertise in policy management lifecycle management, including creation, communication, and delivery. - Experience in using Artificial Intelligence (AI) tools to develop, refine, personalize, and deliver policy updates. - Strong communication skills for creating go-to-market communications upon policy document publication. - Teamwork skills with a team-first approach in a global setting. - Sharp analytical and critical thinking abilities, coupled with clear and confident written and verbal communication skills. Note: Additional details about the company were not provided in the job description. Role Overview: As a GRC Analyst, you will be a vital member of the Governance, Risk, and Compliance team within the Global Information Security group. Your role will involve contributing to a security policy program and its related security policy exceptions process. You will have the opportunity to make a significant impact on cybersecurity goals, collaborate with diverse teams across the company, and engage with external customers, suppliers, and partners. Your responsibilities will include encouraging a security-first culture within the organization and utilizing innovative tools and technologies to protect global operations. Your contributions will be instrumental in achieving cybersecurity objectives. Key Responsibilities: - Maintain and continually improve the cybersecurity Policies Program. - Handle the lifecycle of policies, security standards, and technical security requirements from document creation to publication. - Prepare communication materials for go-to-market efforts. - Process and evaluate risk exceptions to Security Policies, Standards, and Technical Security Requirements. - Collaborate with business requestors to ensure identified risks are proactively addressed through mitigation and remediation. Qualifications Required: - 3+ years of consistent track record in the information security field with expertise in policy management lifecycle management, including creation, communication, and delivery. - Experience in using Artificial Intelligence (AI) tools to develop, refine, personalize, and deliver policy updates. - Strong communication skills for creating go-to-market communications upon policy document publication. - Teamwork skills with a team-first approach in a global setting. - Sharp analytical and critical thinking abilities, coupled with clear and confident written and verbal communication skills. Note: Additional details about the company were not provided in the job description.