Governance, Risk and Compliance (GRC) Analyst

The SharkNinja Global Security and Privacy team seeks an experienced GRC Analyst to join a fast-paced, growing team.  The analyst is a key member of the team reporting to the Director, GRC. In this role, the analyst will lead initiatives and operate programs that reduce SharkNinja business risk in partnership with security, IT and business stakeholders. The job offers a variety of responsibilities with opportunities to make a mark on a growing company's security program.

What you will do:  

• Collaborate with IT stakeholders to oversee IT general control performance and lead improvements to meet SOX audit requirements
• Review and report on vendor SOC reports as a contributor to the SOX internal controls program
• Coordinate SOX audit activities with internal audit and IT stakeholders
• Evaluate vendor cybersecurity program maturity and report results to management & business stakeholders
• Lead eCommerce PCI DSS compliance program
• Document, review and update policies that enhance cybersecurity & privacy program maturity
• Identify, document and lead risk remediation activities across IT and with business stakeholders through the risk register program

Experience:

• Bachelor of Science degree in Information Technology, Cybersecurity, Risk Management, or related field of study

• 3+ years' experience in an IT Internal Audit, IT Governance Risk and Compliance or IT Security related role
• Experience with PCI program management for eCommerce programs

• General understanding of audit methodologies and processes
• Familiarity with compliance programs including NIST Cybersecurity Framework, SOX
• Current information security certification preferred (CISA, CISM)

Who You are:

• Self-Starter who can work independently to deliver results and has a desire to continually learn and grow
• Team Player who values collaboration and relationship building to achieve shared outcomes
• Critical Thinker who can apply effective programs and process to mitigate business risk or improve operational performance
• Adaptable and able to react to shifting priorities, demands and timelines and effectively adjust priorities and execute tasks in a fast-paced environment; able to remain current with global regulations including IoT security regulations
• Effective at working with virtual teams in a global environment with strong communication and presentation skills

#LI-SL3