GRC Analyst

Electronic Arts builds higher levels of entertainment experiences, inspiring players and fans worldwide. Here, everyone is the main character in the story.

The IT Governance, Risk and Compliance (GRC) Analyst is responsible for supporting day-to-day activities across EA's Security Governance, Risk and Compliance programs.

The GRC Analyst will work under the guidance of the GRC Security Operations Manager to assist with the Third-Party Security Risk Assessment program. The job involves participating in the assessment of security, risks, and control effectiveness for applications, infrastructure, and technology projects.

Key responsibilities:

• Assist in reviewing and assessing technical security controls for third-party vendors, primarily around logical network architecture.
• Help develop and implement processes around risk identification, assessment, and remediation, including issues management, exception management, vendor risk management, policy management, and security incident and vulnerability response.
• Support GRC efforts for information risk, network security, and system security by conducting analysis and aiding in the improvement of risk management capabilities.
• Help manage EA's policy exceptions, identifying rationale and risks underlying exception requests, evaluating the effectiveness of compensating controls, and making recommendations.
• Coordinate and participate in the creation and maintenance of IT policies and network security standards.

Experience and skills:

• Bachelor's degree or equivalent experience.
• Two (2) years' experience in information technology is preferred.
• Foundational knowledge in information technology such as hardware, networking, architecture, protocols, file systems, and operating systems.

Bonus points:

• Professional certifications in security, privacy risk management, and audit areas are highly desirable.
• Experience with NIST Cybersecurity Framework and ISO 27001.