GRC Analyst II

About the role

GRC Analyst II at Rackspace. Conduct security risk assessments, control reviews and compliance gap analyses; translate findings into business risk and prioritized recommendations.

What you'll do

• Conduct security risk assessments, control reviews and compliance gap analyses; translate findings into business risk and prioritized recommendations
• Maintain customer risk registers, control matrices, treatment plans, policy exceptions and risk-acceptance records, including approvals and expiry dates
• Map and assess controls against relevant frameworks such as ISO 27001, NIST CSF / 800-53, CIS Controls, SOC 2 and PCI DSS, as applicable to customer scope
• Coordinate remediation governance with cloud, CSPM, VMDR, SOC and infrastructure SMEs; track ownership, evidence, overdue actions and escalation through closure
• Prepare customer-facing risk, compliance and posture reports; lead routine GRC reviews and explain material risks to technical and nontechnical stakeholders

What you need

• 3–6 years in cybersecurity
• Vulnerability assessment
• Cloud security
• ISO 27001
• CISA
• CISM
• Compliance
• Any graduate

What you get