Cybersecurity Compliance Analyst

This is a hands-on execution role, ideal for someone building foundational GRC expertise while contributing to certification lifecycle management, evidence collection, control monitoring, and regulatory reporting support.

Responsibilities:

• Support the Service Manager in maintaining relationships with OGC, the application teams and other across the shared services teams, by preparing documentation, tracking action items, and coordinating meeting logistics.
• Assist in the collection, organization, and validation of evidence artifacts, metrics, and control documentation required for the Global IT risk management framework.
• Help monitor information security controls on an ongoing basis and flag deviations, gaps, or emerging risks to the Service Manager for escalation to the global GRC team.
• Coordinate the annual risk assessment process for selected applications by gathering data, coordinating stakeholder input, and drafting supporting documentation.
• Contribute to the preparation of annual reports and governance materials, including drafting content and compiling data for C-level presentations.
• Assist in disseminating GRC training materials and coordinating regional awareness sessions, including scheduling, content adaptation, and tracking participation.
• Maintain and update trackers/logs of newly identified IT risks and compliance gaps, ensuring accurate documentation before escalation to the global GRC team.
• Support certification lifecycle activities (e.g., audit scheduling, evidence readiness checks, tracking remediation actions) for relevant frameworks.
• Conduct research on regional regulatory requirements and summarize findings to support the Service Manager's representation of regional needs within the global team.

Qualifications:

• Foundational knowledge of information security risk management, governance, and compliance principles and practices.
• Basic understanding of information systems auditing, control monitoring, and risk assessment concepts.
• Strong research and data-gathering skills, with the ability to synthesize information from internal and external sources.
• Ability to define problems, collect and analyze data, and draw clear, well-supported conclusions.
• Clear written and verbal communication skills, with the ability to translate technical information for varied audiences.
• Strong organizational skills and attention to detail, particularly with sensitive or confidential information.
• Ability to learn quickly, adapt to new tools/frameworks, and work effectively in a fast-paced, evolving environment.
• Good collaboration and stakeholder support skills; customer-service mindset.
• Eagerness to build functional GRC expertise and grow into more senior compliance/certification roles.

Benefits:

• Immediate medical, dental, vision and prescription drug coverage
• Flexible family care days, paid parental leave, new parent ramp-up programs, subsidized back-up child care and more
• Family building benefits including adoption and surrogacy expense reimbursement, fertility treatments, and more
• Vehicle discount program for employees and family members and management leases
• Tuition assistance
• Established and active employee resource groups
• Paid time off for individual and team community service
• A generous schedule of paid holidays, including the week between Christmas and New Year's Day
• Paid time off and the option to purchase additional vacation time.