At Enverus, we're seeking a GRC Analyst to join our Information Security team. The role offers the opportunity to join a rapidly growing company delivering industry-leading solutions to customers in the world's most dynamic and fastest-growing sector.
Requirements
- Conduct enterprise and third-party risk assessments aligned with ISO 27001 and NIST frameworks.
- Maintain the enterprise risk register, ensuring clear ownership and timely remediation tracking.
- Support internal and external audits, including evidence collection and remediation management.
- Develop and maintain GRC policies and controls in line with SOC 2 and ISO requirements.
- Build risk reporting dashboards and communicate insights to leadership stakeholders.
- Collaborate with Engineering, Legal, and IT teams to embed risk management into operations.
- Evaluate and implement GRC tools and automation to improve scalability and efficiency.
- Apply AI-enabled solutions to enhance GRC workflows, including reporting, control testing, and vendor assessments.
Benefits
- Competitive Salary
- Health Insurance
- Paid Time Off
- Professional Development Opportunities