Lead GRC Analyst (IT/Security)

Design, execute, and mature the IT governance, risk, and compliance program by coordinating risk management activities, supporting control design and testing, and maintaining audit-ready evidence. Partner with IT, Security, Legal, Finance, HR, Operations, and business stakeholders to embed compliance into day-to-day processes and manage the Enterprise IT Risk Register. Support vendor and cloud service provider risk reviews, administer GRC automation platforms, and develop compliance metrics and executive reports. Lead control testing, evidence collection, and site walkthroughs to validate operating effectiveness and identify process gaps. Draft and maintain IT policies, standards, and procedures while developing training materials and self-service resources. Define user access review schedules, validate least privilege and segregation of duties, and track remediation of excessive or stale access. Represent the function in cross-functional governance discussions, provide technical direction to team members, and ensure alignment with regulatory requirements such as SOX, NIST CSF, ISO 27001, and SOC 2.