The Mission:

We are seeking an experienced and highly motivated GRC Analyst to join our team. This role offers the opportunity to work on complex GRC initiatives and contribute to the continuous improvement of our organization's governance, risk management, and compliance programs.

Core Responsibilities:

As a GRC Analyst, you will be our first hire in our GRC team, responsible for assisting in the development, implementation, and maintenance of the organization's governance, risk management, and compliance programs. Your experience will be invaluable in helping us:

• Risk Assessment: Conduct risk assessments, identify vulnerabilities, and work with cross-functional teams to develop and implement risk mitigation strategies.
• Compliance Management: Manage and oversee compliance efforts to meet the company’s business objectives.
• Policy Development: Lead the development and maintenance of GRC policies, procedures, and guidelines to reflect current industry best practices and organizational needs.
• Documentation: Maintain thorough and up-to-date documentation of GRC processes, reports, findings, evidence, and action plans.
• Vendor Risk Management: Evaluate and monitor third-party vendors for compliance with security and risk management requirements, ensuring vendor risk is effectively managed.
• Reporting: Generate regular reports on compliance and risk-related metrics for management and stakeholders.
• Customer Questionnaires – Participate in answering customer questions on Typeface’s information security program, compliance, policies, and procedures.

Minimum Qualifications:

• Bachelor's degree in a relevant field (e.g., Information Security, Risk Management, Business, or a related discipline).
• At least 2 years of experience in a GRC role.
• Strong understanding of compliance frameworks, standards, and regulations (e.g., NIST, ISO 27001, GDPR, CCPA, SOC2, etc).
• Proven ability to lead and manage GRC initiatives independently.
• Excellent analytical, problem-solving, and communication skills.
• Detail-oriented with a commitment to accuracy.
• Strong communication and interpersonal skills, with the ability to effectively interact with individuals at all levels of the organization.
• Current industry certifications (e.g., CISSP, CISM, CRISC) are a plus.
• Ability to work independently and manage multiple tasks simultaneously, while meeting deadlines.
• Strong organizational and time management skills, with a proactive and results-oriented mindset.