GRC Analyst at Suzy Remote

Other Jobs To Apply

GRC Analyst job at Suzy. Remote. Suzy puts the voice of the consumer at your fingertips. Whether you're a novice or an expert researcher, our platform brings advanced tools together with the highest quality audience to deliver insights in minutes. Some of the biggest brands in the world use Suzy to deliver breakthrough products and experiences backed by data-driven decisions. The Governance, Risk, Compliance (GRC) Analyst will manage policies, procedures, and standards to govern the protection of corporate information systems, networks, data, and third‑party services. The analyst will stay up to date on the latest cybersecurity intelligence while managing privacy workflows to ensure the company meets regulatory compliance. Responsibilities Third Party Risk Management Provide oversight, coordination, and deliver the activities supporting successful risk management activities around third parties Perform risk analysis for systems, processes, third‑party tools/applications, and configurations Perform Third Party Risk Management (TPRM) functions and analyze SOC‑2 and other reporting from vendors Respond to initial and annual security questionnaires from customers. Controls and Risk Management Manage company's Risk Register Perform periodic risk assessments Document the results and develop a plan of action and milestones for mitigating identified risk Gather data for metric reporting for company's Information Security and Privacy Council. Audits Coordinate multiple large‑scale audit projects and programs simultaneously Help implement Governance, Risk and Control tool Document business ownership and responsibilities of security controls using the company's GRC tool Schedule and perform regular assessments (internal and external) to test the effectiveness of controls Manage remediation efforts for the identified gaps including assessment of new or enhanced implemented controls Coordinate, track, and verify remediation of audit findings. Asset Management Maintain Suzy's information asset inventory with accurate and updated information Identify and rank the value, sensitivity, and criticality of the operations and assets that could be affected should a threat materialize. Basic Qualifications Creative problem solver and desire to learn Willing to #getyourhandsdirty and work across cross‑functional teams Bachelor's degree or equivalent work experience (Information Technology, Engineering, Cybersecurity, Audit, Risk, Compliance, or a related technical field) Familiarity with industry security frameworks, including SCF, ISO, SOC, and NIST Audit, compliance, and/or risk management experience Experience in Project Management Methodologies Experience testing or auditing technical controls. Preferred Qualifications Certified Information Security Auditor/Manager (CISA/M) designation or CISSP, CRISC, CISA, CIPT, CIPP Direct participation in ISO/SOC audits Understanding of Enterprise Risk Management and Strategy frameworks Providing consultative information security or risk management services to a broad range of companies Experience proposing enterprise level solutions to mitigate risk Experience creating and managing corporate security policies Microsoft cloud technical certifications. Benefits We take care of our employees and their families. We have generous health dental and vision benefits, and our 401K plan vests immediately A friendly, fun, and collaborative work environment that allows for frequent exposure to executives The opportunity to make an immediate impact as a part of a fast‑growing company The target base compensation for this role is $125,000 - $135,000. Suzy is an equal opportunity employer. We are a welcoming place for everyone, and we do our best to ensure all people feel supported and connected at work. Suzy is committed to protecting its customers, employees, partners, and the company as a whole, from damaging acts that are intentional or unintentional. Effective security is a team effort involving the participation and support of every user who interacts with company information/data and systems. It is the responsibility of each individual to help protect company information assets. #J-18808-Ljbffr Apply tot his job Apply To this Job Apply To This Job Apply tot his job Apply To this Job Apply To This Job

Back to blog

Common Interview Questions And Answers

1. HOW DO YOU PLAN YOUR DAY?

This is what this question poses: When do you focus and start working seriously? What are the hours you work optimally? Are you a night owl? A morning bird? Remote teams can be made up of people working on different shifts and around the world, so you won't necessarily be stuck in the 9-5 schedule if it's not for you...

2. HOW DO YOU USE THE DIFFERENT COMMUNICATION TOOLS IN DIFFERENT SITUATIONS?

When you're working on a remote team, there's no way to chat in the hallway between meetings or catch up on the latest project during an office carpool. Therefore, virtual communication will be absolutely essential to get your work done...

3. WHAT IS "WORKING REMOTE" REALLY FOR YOU?

Many people want to work remotely because of the flexibility it allows. You can work anywhere and at any time of the day...

4. WHAT DO YOU NEED IN YOUR PHYSICAL WORKSPACE TO SUCCEED IN YOUR WORK?

With this question, companies are looking to see what equipment they may need to provide you with and to verify how aware you are of what remote working could mean for you physically and logistically...

5. HOW DO YOU PROCESS INFORMATION?

Several years ago, I was working in a team to plan a big event. My supervisor made us all work as a team before the big day. One of our activities has been to find out how each of us processes information...

6. HOW DO YOU MANAGE THE CALENDAR AND THE PROGRAM? WHICH APPLICATIONS / SYSTEM DO YOU USE?

Or you may receive even more specific questions, such as: What's on your calendar? Do you plan blocks of time to do certain types of work? Do you have an open calendar that everyone can see?...

7. HOW DO YOU ORGANIZE FILES, LINKS, AND TABS ON YOUR COMPUTER?

Just like your schedule, how you track files and other information is very important. After all, everything is digital!...

8. HOW TO PRIORITIZE WORK?

The day I watched Marie Forleo's film separating the important from the urgent, my life changed. Not all remote jobs start fast, but most of them are...

9. HOW DO YOU PREPARE FOR A MEETING AND PREPARE A MEETING? WHAT DO YOU SEE HAPPENING DURING THE MEETING?

Just as communication is essential when working remotely, so is organization. Because you won't have those opportunities in the elevator or a casual conversation in the lunchroom, you should take advantage of the little time you have in a video or phone conference...

10. HOW DO YOU USE TECHNOLOGY ON A DAILY BASIS, IN YOUR WORK AND FOR YOUR PLEASURE?

This is a great question because it shows your comfort level with technology, which is very important for a remote worker because you will be working with technology over time...