Advert / Media / Entertainment · United States
Sr. Analyst, GRC
Explore this job opportunity at Experis. Review the details and continue directly to the employer application page.
Job summary
CompanyExperis
Advertiser typeAgency
CategoryAdvert / Media / Entertainment
Subcategory
CountryUnited States
LocationUnited States
LanguageEnglish - United Kingdom (en-GB)
Contact
Employment typeContract
Work hoursNot Specified
Interested in this position?
Continue to the official employer application page and apply directly.
Apply now for Sr. Analyst, GRCJob description
Description Requisition Status: Pending Status Reason: Pending Sourcing Reason: Staff Vacancy Reason Detail: Manager: Department: BVCOR CYBERSECURITY COMPLIANCE : 15555 Job Category: Information Technology Service Job Code: 3779:Information Security Sr Anlyst Job Title: Information Security Sr AnlystSr. Analyst, GRC
Onsite 5 days/week - manager is open to Cary, NC / Houston, TX/ Overland Park, KS
Temp to perm
Overview
The Sr. Analyst, Governance, Risk, and Compliance (GRC) plays an important role in the GRC delivery framework, ensuring Black & Veatch's compliance with contractual and regulatory requirements, assessing control design and operation against common standards and frameworks, and assisting with third-party/supply chain risk management. The candidate will also promote a culture of risk awareness across the enterprise among other responsibilities. With an emphasis on cyber, contract and regulatory compliance risk management, the ideal candidate should be able to contribute to measuring success and identifying improvement opportunities and capabilities development in these areas.
This role is ideal for a detail-oriented professional with a passion for cyber and compliance risk management who is comfortable operating independently. Independent and critical thinking is absolutely necessary to be successful in this role as is a desire to drive efficiencies in function delivery and day-to-day tasks.
Key Responsibilities
Contract Risk Management
Proven experience reviewing client contract provisions related to data security, breach reporting, cyber resilience, and compliance certifications and measuring compliance in IT and security architecture and operations.
Regulatory Compliance Risk Management
Support independent certification and audit by working with D&IT peer groups and lines of business to collect documentation and evidence of security policies and operations
Request and review documentation and evidence from control owners to certify and validate compliance to standards and industry-accepted best practice
Monitor regulatory and legal landscape at a global scale and across market sectors and maintain awareness of compliance requirements
IT Governance
Act as an informed voice in development of policy and ensure alignment with regulatory, legal, and contractual requirements
Assist establishment and enforcement of standards of practice documentation to be referenced by architecture and operations teams
Contribute process and subject matter expertise in governance forums and cross-functional committees
Cyber Risk Management
Support establishment, collection, and ongoing improvement of metrics to measure effectiveness of cyber risk management and provide data-driven insight to decision makers and control owners
Collaborate with peer D&IT groups to collect KPI's, KRI's and drive efficiency through automation and other means
Supplier/Third Party Risk Management
Contribute subject matter expertise through third party risk assessment process
Identify and communicate risk of vendor engagements and mitigation actions to business owners and D&IT stakeholders
Assist review of client security requirements in contracts and aggregate relevant clauses to inform contractual risk
Qualifications
Minimum Requirements
Bachelor's degree in information systems, Information Security, or a related field
7-10 years of experience in GRC executing or auditing against standards, frameworks, and industry regulations
Demonstrated experience supporting GRC functions for global companies
Solid proficiency in risk assessment methodologies and frameworks
Attachments: Sr Analyst GRC- US.docx , Sr Analyst GRC- US.docx
Location Client Location Country: United States State/Province: Kansas City: Overland Park Address: 11401 Lamar Ave, KCP POSTAL CODE: 66211 Work Location Same as Client Location Other Client Location Country: United States State/Province: North Carolina City: Cary Address: 175 Regency Woods, Suite 300, RGRALH POSTAL CODE: 27518 Work Completed Offsite Schedule Start Date: 09/28/2026 Hours Per Week: 40.00 Est. End Date: 03/28/2027 Hours Per Day: 8.00 Schedule Notes: Supplier Call today 9/2/26 at 2:30pm EST 1 # Phone conference ID: # Days Per Week: 5.00 Part Time or Full Time: Full Time Financials Department: BVCOR CYBERSECURITY COMPLIANCE : 15555 Max Rate: $93.75 Rate Application: Per Hour Currency: USD Supplier FLSA Classification: N/A H-1B: No Sub-Contracted Worker: No Contact Information MSP Contact: Oldag, Ashley Additional Contact: MSP Phone: Additional Phone: HR Contact: Additional Email: Operations Specialist Contact: Operations Specialist Phone : Supplier Notes Contacts Requisition Custom Fields Is travel required?: No Black & Veatch Entity: BVCOR - Black & Veatch Corporation Black & Veatch Business unit: BECIO - Business Enablement - CIO / Global Information Technology Supervisor: Gregory Dzurinda (135793) Worker Type: Full Time External / Posted Job Title: Sr. Analyst, GRC Min. Pay Rate: Max. Pay Rate: Will worker record time on an on call or periodic basis?: Yes Dates of Interest Date Created: 09/02/2026 Date Closed: Date Pending: 09/02/2026 Date Cancelled:
Onsite 5 days/week - manager is open to Cary, NC / Houston, TX/ Overland Park, KS
Temp to perm
Overview
The Sr. Analyst, Governance, Risk, and Compliance (GRC) plays an important role in the GRC delivery framework, ensuring Black & Veatch's compliance with contractual and regulatory requirements, assessing control design and operation against common standards and frameworks, and assisting with third-party/supply chain risk management. The candidate will also promote a culture of risk awareness across the enterprise among other responsibilities. With an emphasis on cyber, contract and regulatory compliance risk management, the ideal candidate should be able to contribute to measuring success and identifying improvement opportunities and capabilities development in these areas.
This role is ideal for a detail-oriented professional with a passion for cyber and compliance risk management who is comfortable operating independently. Independent and critical thinking is absolutely necessary to be successful in this role as is a desire to drive efficiencies in function delivery and day-to-day tasks.
Key Responsibilities
Contract Risk Management
Proven experience reviewing client contract provisions related to data security, breach reporting, cyber resilience, and compliance certifications and measuring compliance in IT and security architecture and operations.
Regulatory Compliance Risk Management
Support independent certification and audit by working with D&IT peer groups and lines of business to collect documentation and evidence of security policies and operations
Request and review documentation and evidence from control owners to certify and validate compliance to standards and industry-accepted best practice
Monitor regulatory and legal landscape at a global scale and across market sectors and maintain awareness of compliance requirements
IT Governance
Act as an informed voice in development of policy and ensure alignment with regulatory, legal, and contractual requirements
Assist establishment and enforcement of standards of practice documentation to be referenced by architecture and operations teams
Contribute process and subject matter expertise in governance forums and cross-functional committees
Cyber Risk Management
Support establishment, collection, and ongoing improvement of metrics to measure effectiveness of cyber risk management and provide data-driven insight to decision makers and control owners
Collaborate with peer D&IT groups to collect KPI's, KRI's and drive efficiency through automation and other means
Supplier/Third Party Risk Management
Contribute subject matter expertise through third party risk assessment process
Identify and communicate risk of vendor engagements and mitigation actions to business owners and D&IT stakeholders
Assist review of client security requirements in contracts and aggregate relevant clauses to inform contractual risk
Qualifications
Minimum Requirements
Bachelor's degree in information systems, Information Security, or a related field
7-10 years of experience in GRC executing or auditing against standards, frameworks, and industry regulations
Demonstrated experience supporting GRC functions for global companies
Solid proficiency in risk assessment methodologies and frameworks
Attachments: Sr Analyst GRC- US.docx , Sr Analyst GRC- US.docx
Location Client Location Country: United States State/Province: Kansas City: Overland Park Address: 11401 Lamar Ave, KCP POSTAL CODE: 66211 Work Location Same as Client Location Other Client Location Country: United States State/Province: North Carolina City: Cary Address: 175 Regency Woods, Suite 300, RGRALH POSTAL CODE: 27518 Work Completed Offsite Schedule Start Date: 09/28/2026 Hours Per Week: 40.00 Est. End Date: 03/28/2027 Hours Per Day: 8.00 Schedule Notes: Supplier Call today 9/2/26 at 2:30pm EST 1 # Phone conference ID: # Days Per Week: 5.00 Part Time or Full Time: Full Time Financials Department: BVCOR CYBERSECURITY COMPLIANCE : 15555 Max Rate: $93.75 Rate Application: Per Hour Currency: USD Supplier FLSA Classification: N/A H-1B: No Sub-Contracted Worker: No Contact Information MSP Contact: Oldag, Ashley Additional Contact: MSP Phone: Additional Phone: HR Contact: Additional Email: Operations Specialist Contact: Operations Specialist Phone : Supplier Notes Contacts Requisition Custom Fields Is travel required?: No Black & Veatch Entity: BVCOR - Black & Veatch Corporation Black & Veatch Business unit: BECIO - Business Enablement - CIO / Global Information Technology Supervisor: Gregory Dzurinda (135793) Worker Type: Full Time External / Posted Job Title: Sr. Analyst, GRC Min. Pay Rate: Max. Pay Rate: Will worker record time on an on call or periodic basis?: Yes Dates of Interest Date Created: 09/02/2026 Date Closed: Date Pending: 09/02/2026 Date Cancelled:
Ready to apply?
This job is provided by Experis. Click below to continue to the application page.
Continue to application