Business Analyst - GRC

Job Description
A customer is seeking a GRC Security Analyst to support collaboration efforts with the Governance, Risk and Compliance team and Internal Audit groups managing NIST and SOX related activities. This role will serve as a Liaison to ensure timely tracking, reporting and resolution of audit findings, assist in drafting and managing Management Action Plans (MAPs), and coordinate SOX/NIST testing and escalations with control owners.

• Audit Liaison & Remediation Tracking:
o Act as the primary point of contact between the Security GRC team and Internal Audit.
o Track and monitor audit findings related to cybersecurity, IT risk, and SOX controls.
o Draft, review, and manage Management Action Plans (MAPs) in response to audit findings.
o Coordinate with control owners and stakeholders to gather evidence and updates.
• SOX Testing Coordination:
o Manage the end-to-end SOX testing lifecycle for ITGCs and application controls.
o Coordinate with contr...