GRC Analyst

As a member of Hitachi Digital's Governance Risk and Compliance (GRC) Team, you will play a vital role in ensuring the company's adherence to internal policies and external regulations. You will be responsible for supporting the development and maintenance of GRC policies, procedures, and standards. Additionally, you will monitor compliance with regulations such as GDPR, ISO 27001, and SOX, as well as assist in internal and external audits. Your role will involve conducting risk assessments across business units and IT systems, maintaining the risk register, and tracking mitigation plans. You will also be involved in business continuity and incident response planning. Third-Party Risk Management (TPRM) will be a key aspect of your responsibilities, including performing due diligence on vendors, maintaining a third-party inventory, and collaborating with procurement and legal teams to ensure vendor compliance with security and privacy requirements. Furthermore, you will be tasked with preparing dashboards and reports for leadership on risk posture, compliance status, and third-party risk. Tracking and reporting on key risk indicators (KRIs) and key performance indicators (KPIs) will be essential in this role. The ideal candidate for this position will have a Bachelor's degree in Information Security, Risk Management, Business, or a related field, along with 4+ years of experience in GRC, risk management, or compliance roles. Familiarity with regulatory frameworks such as NIST, ISO 27001, SOC 2, and HIPAA will be beneficial. Strong analytical, communication, and stakeholder management skills are required, along with experience in third-party risk management tools and processes. Proficiency in GRC platforms like Archer, ServiceNow GRC, or OneTrust is a plus. If you are a motivated individual with a passion for information security and risk management, and possess the necessary qualifications and experience, we invite you to join our dynamic team at Hitachi Digital. Your contribution will be instrumental in upholding the highest standards of Governance, Risk, and Compliance within our organization.,