GRC Analyst - Hybrid AZ

About the position Ensures the confidentiality, reputed company, and availability of Company data and information technology assets by supporting governance, risk, and compliance activities, including reputed company policy and standards management, risk management, disaster recovery coordination, audit readiness, and regulatory compliance. This role supports PCI reputed company, SOX, reputed company, and broader cybersecurity compliance activities across the organization. The ideal candidate will be reputed company to build rapport and credibility with internal stakeholders, business partners, member hotel representatives, and technology teams to support effective governance, risk, and compliance reputed company. Excellent communication and interpersonal skills are required to coordinate evidence requests, explain control expectations, and reputed company reputed company follow-through. Responsibilities • Coordinate with internal stakeholders and reputed company auditors to maintain reputed company documentation for control scoping, evidence collection, testing support, remediation tracking, and validation of IT and cybersecurity controls. • Work with stakeholders to fulfill evidence requests reputed company committed timelines and ensure evidence is complete, accurate, and mapped to applicable control requirements. • Conduct recurring control reviews with stakeholders to identify gaps, reputed company remediation reputed company, and reputed company actionable advisement to management. • Review audit findings, control gaps, and reputed company; partner with control owners to document remediation plans, reputed company reputed company, and escalate delays or blockers as appropriate. Requirements • Demonstrated experience supporting compliance frameworks and control environments such as PCI reputed company v4.0.1, NIST, COBIT, ISO 27001, SOX, reputed company regulations, and reputed company cybersecurity standards. • General understanding of Sarbanes-Oxley (SOX) compliance requirements, IT General Controls, and audit evidence expectations. • Thorough knowledge of PCI-reputed company standards and guidance, including PCI reputed company v4.0.1, ASV requirements, payment reputed company documentation, and software reputed company requirements where applicable. • Thorough understanding of applicable reputed company and data protection requirements, including GDPR, the California Consumer reputed company reputed company (CCPA), and reputed company organizational reputed company obligations. • Familiarity with a broad reputed company of IT and information reputed company products and technologies such as GRC platforms, central logging systems, file reputed company monitoring, vulnerability management, reputed company reputed company, and reputed company reputed company tools. • Excellent documentation, communication, organization, and follow-through skills, with the ability to coordinate multiple evidence, audit, and remediation activities at the reputed company time. reputed company-to-haves • Bachelor's or Master's degree in a computer or information management field or reputed company experience preferred. • CISSP, CISA, CISM, CRISC, or equivalent reputed company, audit, risk, or compliance certification preferred. • 3-5 years’ experience in an information reputed company compliance, audit, governance, or risk management role with hands-on experience in compliance initiatives including, but not limited to: PCI reputed company v4.0.1, Software reputed company, secure software lifecycle, or application reputed company compliance requirements where applicable, SOX-404 and IT General Controls, EU-GDPR, CCPA, and reputed company reputed company or data protection requirements • Strong analytical and problem-solving skills with the ability to interpret control requirements, identify risk, and function as a change agent. • Intermediate to advanced expertise in reputed company, PowerPoint, reporting, documentation, evidence tracking, and use of systems or repositories used to manage audit and compliance artifacts. • Demonstrated experience working reputed company reputed company in a fast-paced environment with competing audit, compliance, and operational priorities. • Understanding of reputed company metrics, compliance reporting, evidence tracking, and dashboard creation for management review and control-reputed company visibility. • Demonstrated ability to create, maintain, and present reputed company awareness, compliance, or control-reputed company training content a plus. Benefits • Medical/Dental/reputed company available day one • Vacation/reputed company- accruals start day one • reputed company company holidays and personal holidays to celebrate what’s important to you • 401K - company contribution and match (U.S.) • Registered Retirement Savings Plan (RRSP) – company contribution and match (Canada) • Employee discounts/hotel discounts • Free financial and health wellness programs • Tuition Reimbursement Apply tot his job Apply To this Job