GRC Analyst - Remote Position

About the Role

We are looking for a GRC Analyst remote to join our team at Juniper Square. In this role, you will support the organization's Governance, Risk, and Compliance (GRC) program, including the third-party risk management program. If you are passionate about making markets work better through technology and want to contribute to a values-driven organization, we want to hear from you!

What You'll Do

• Conduct vendor and contractor risk assessments during onboarding, adhering to a defined Service Level Agreement (SLA).
• Perform annual vendor monitoring and re-assessment processes for existing vendors.
• Maintain the vendor inventory and collaborate with vendors to mitigate identified risks.
• Triage incoming technical security requests for vendor application/system integrations and route them to the appropriate teams.
• Help mature the classification and management framework for critical vendors.
• Benchmark, identify, drive, and manage improvements to the vendor security risk management program.
• Develop, maintain, and analyze reporting and metrics to provide leadership with visibility into the vendor and third-party risk posture.
• Work with cross-functional teams to procure controls evidence for external auditors and issue reports in a timely manner.

Requirements

• Bachelor's degree in information systems, engineering, business, risk management, or a related field.
• 5+ years of security/GRC experience, including substantial experience with vendor security risk management.
• Proven experience in managing and improving vendor security risk programs.
• Direct experience with major security frameworks, regulations, and standards such as SOC 2 and ISO 27001.
• Excellent communication and interpersonal skills to influence security and compliance outcomes across the organization.

Nice to Have

• Prior experience with major GRC software solutions.

What We Offer

• Flexible remote work arrangements.
• Collaborative team environment across multiple regions.
• Opportunities for professional growth and development.
• Access to a variety of resources and tools to support your work.
• Engagement in meaningful projects that impact the financial ecosystem.