Senior GRC Analyst, IT Controls
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior Analyst at Arco Educação focusing on GRC and risk management in cybersecurity. Leading audits, governance, and improving data security processes in a dynamic education technology environment.
Responsibilities:
- Continuous Information Security audit (Design and Operating Effectiveness testing): perform periodic technical tests to validate that designed security controls are operating as intended;
- Data Governance and Technical Autonomy: contribute to the company's data governance;
- Maturity and Gap Management (CIS/NIST): lead maturity assessments, identify gaps, define remediation priorities, and act as escalation point for high‑risk blockers with technical teams;
- Vulnerability Management: manage cyber risk based on CSPM events and vulnerability scanners;
- Audit Support: act as the technical focal point for external and internal audits, organizing evidence and translating audit requirements for technical teams;
- Data Protection (DLP/Classification): audit and enforce the correct implementation of DLP controls and adherence to the data classification policy across complex Data Lake and multi‑database environments;
- Process Improvement;
- Tracking and monitoring action plans.
Requirements:
- Strong GRC and Risk knowledge: familiarity with risk analysis methodologies (ISO 31000, ISO 27005, quantitative and qualitative approaches);
- Hands‑on experience in database security, Data Lakes, and cloud security architecture (AWS/GCP);
- Framework expertise: solid practical knowledge of CIS Controls (v8) and NIST CSF;
- Understanding of ISO 27001/27002;
- Technical and audit background (Tests of Design and Tests of Effectiveness — ToD/ToE);
- Productivity tools: advanced Excel/Google Sheets and familiarity with Jira.
Benefits:
- Meal and/or food allowance
- Health and dental insurance
- Transportation allowance
- Extended maternity and paternity leave
- Childcare assistance
- Employee well‑being: partnerships with Wellhub and Zenklub
- Education support/incentives
- Discounts on airline tickets
- Partnership for pet health insurance
- Access to Arco educational materials for employees' children
- Partnerships for MBA and postgraduate programs
Similar Jobs
Global Regulatory Lead, PDx
Global Regulatory Lead overseeing pharmaceutical diagnostics from pre-clinical to registration in global markets. Leading regulatory strategy for new product introductions and compliance obligations.
Manager, Regulatory Compliance
Manager of Regulatory Compliance leading U.S. sportsbook trading operations at DraftKings. Ensuring compliance across jurisdictions and managing a team in a fast-paced environment.
Risk and Compliance Manager – Retail Broking
Risk and Compliance Manager supporting compliance obligations for retail broking businesses in the UK. Providing regulatory guidance while working closely with the Risk & Compliance team remotely.
Regulatory Lead – Mount Nansen Remediation
Regulatory Lead overseeing environmental assessments and permitting for Mount Nansen Remediation project. Leading collaboration between technical teams and regulatory bodies.
Regulatory Affairs Associate
Regulatory Affairs Associate for Parexel developing and publishing regulatory submissions to health authorities. Collaborating with stakeholders to ensure compliance and quality in documentation.
IT Compliance Specialist, SISP
IT Compliance Specialist advancing IT Compliance program at Sedgwick. Conducting risk assessments, collaborating with stakeholders, and ensuring regulatory compliance.
Associate Director – Global Compliance Platform
Associate Director overseeing Amgen's global compliance platform (C3) for healthcare compliance requirements. Leading strategy, governance, and operations to optimize compliance processes globally.
Trade Compliance Specialist
Trade Compliance Specialist reviewing and ensuring compliance of export orders and documentation for corporate clients. Collaborating with partners to maintain regulatory standards and documentation accuracy.
Medicare Compliance, Advertising Filing Specialist
Medicare Compliance & Advertising Filing Specialist managing all Medicare advertising submissions through HPMS. Ensuring compliance with CMS guidelines and managing material submissions across multiple carriers.
Senior Director – Contracts Compliance & Operations
Senior Director overseeing the contract compliance program and operational functions at Amentum. Lead initiatives to enhance efficiency and ensure adherence to government regulations.
Senior Director, Global Trade Compliance
Senior Director leading global trade compliance programs and teams at Beckman Coulter Diagnostics. Driving strategy and operational efficiency in a dynamic global business environment with compliance expertise.
Senior Compliance Officer
Senior Compliance Officer overseeing financial services compliance at Acorns. Leading regulatory strategies and ensuring adherence to regulations for a financial wellness platform.
Credentialing & Compliance Lead
Credentialing & Compliance Lead responsible for the Medicare DMEPOS credentialing lifecycle and compliance activities. Facilitating customer interactions and maintaining regulatory standards within a fast-growing startup.
BESS Product Compliance Engineer
Software Solutions Engineer focusing on deploying VaultOS Power Plant Controller in Australia. Collaborating with global teams to develop utility-scale energy storage systems.
Data Protection, Compliance & Transformation Specialist
Referent für Datenschutz, Compliance und Transformation bei Linimed Gruppe GmbH. Verantwortung für operative Umsetzung und Weiterentwicklung der Prozesse im digitalen Bereich.
Business License Compliance Manager
Business License Compliance Manager at Apex Companies ensuring compliance with business licensing across jurisdictions. Overseeing licensing processes, renewals, and regulatory requirements with internal stakeholders.
Manager, Insurance Compliance
Manager, Insurance Compliance responsible for insurance compliance with GSE and HUD lenders. Utilizing a compliance automation platform for efficient portfolio management and strategic client support.
Insurance Compliance Analyst
Analyst handling insurance compliance operations within technology-driven environment supporting GSE and HUD lender portfolios. Collaborating with senior team members for high-quality delivery and improvement.
Compliance Analyst, Research Compliance
Compliance Analyst coordinating export control compliance operations at City of Hope. Ensuring adherence to federal international compliance laws and regulations in the research sector.
Senior Compliance Analyst, Research Compliance
Senior Compliance Analyst at City of Hope ensuring compliance in research activities and regulatory standards. Conducting audits, documenting findings, and assisting in investigations of non-compliance issues.