2 months ago
Senior GRC Analyst (Business Resilience)
Vacancy from Hirify Global, list of international tech companiesPlus is required to make matches and apply
Match & Cover letter
Plus required for matching with this vacancy
Job description
Text:
TL;DR
Senior GRC Analyst (Business Resilience) (GRC/BCM/DR): Developing and improving governance, risk, compliance, and operational resilience programs for an IoT-enabled industrial technology platform with an accent on business continuity, disaster recovery, incident response, and regulatory alignment. Focus on conducting business impact analyses, defining RTO/RPO objectives, designing recovery strategies, and testing organizational resilience through tabletop and technical recovery exercises.
Company
combines industrial IoT hardware and software to help frontline maintenance teams improve operational efficiency and decision-making.
What you will do
- Lead operational resilience, business continuity, disaster recovery, incident response, and technology risk management activities.
- Conduct business impact analyses, define RTO/RPO objectives, develop disruption scenarios, and establish recovery strategies for critical services.
- Maintain BCM, DR, and IR policies, standards, procedures, recovery plans, and playbooks.
- Plan and facilitate tabletop exercises, recovery tests, failover exercises, and backup validation while tracking corrective actions.
- Manage risk registers, controls, mitigation plans, audit evidence, and remediation activities in collaboration with control owners.
- Partner with Engineering, Infrastructure, Product, Security, and business teams on compliance, resilience, audits, and customer security due diligence.
Requirements
- Background in IT, information security, GRC, internal audit, compliance, or quality management.
- Experience implementing BCM and DR programs based on ISO 22301 and ISO 22313.
- Experience with BIA, RTO/RPO definition, recovery strategies, contingency planning, disruption scenarios, and resilience testing.
- Experience developing policies, procedures, playbooks, controls, and remediation plans for BCM, DR, and IR.
- Knowledge of ISO 27001, ISO 27002, ISO 27005, NIST, LGPD, and GDPR requirements.
- Advanced English proficiency required.
Nice to have
- Experience with compliance automation, GRC platforms, and BCM tools.
- Experience working with multiple security frameworks and regulatory environments.
- Experience managing remediation initiatives in Jira, Linear, Monday, or similar platforms.
- Security certifications or experience using automation and AI to improve GRC operations.
Culture & Benefits
- Competitive salary and stock options.
- 30 days of paid annual leave.
- Education and courses stipend.
- Health plan with national coverage and no coparticipation, plus dental insurance.
- R$1,035 monthly meal allowance and Wellhub access.
- R$300 monthly sports incentive and an opportunity to earn a trip anywhere in the world every four years.
Be careful: if the employer asks you to log into their system using iCloud/Google, send codes/passwords, or run code/software, don't do it - these are scammers. Always click "Report" or contact support. More in guide →