GRC Analyst

Electronic Arts is seeking a GRC Analyst to support day-to-day activities across EA's Security Governance, Risk and Compliance programs.

The successful candidate will work under the guidance of the GRC Security Operations Manager to assist with the Third-Party Security Risk Assessment program, assessing security, risks, and control effectiveness for applications, infrastructure, and technology projects.

Key responsibilities:

• Assist in reviewing and assessing technical security controls for third-party vendors
• Help develop and implement processes around risk identification, assessment, and remediation
• Support GRC efforts for information risk, network security, and system security
• Help manage EA's policy exceptions and evaluate the effectiveness of compensating controls
• Coordinate and participate in the creation and maintenance of IT policies and network security standards
• Participate as a subject matter expert on governance and project management teams

Experience and skills:

• Bachelor's degree or equivalent experience
• Two years' experience in information technology
• Foundational knowledge in information technology, including hardware, networking, architecture, protocols, file systems, and operating systems
• Familiarity with application and/or database development and system administration
• Basic understanding of network security architectures and TCP/IP protocol suite

Bonus points:

• Professional certifications in security, privacy risk management, and audit areas
• Experience with NIST Cybersecurity Framework and ISO 27001