[Hiring] IT GRC Lead @Valvoline Global

Role Description

The Sr. GRC Analyst supports Valvoline Global's IT Governance, Risk, and Compliance (GRC) function by advancing governance, data protection, and information security initiatives. Key responsibilities include:

• Conducting information security risk and control assessments.
• Supporting security awareness and information security maturity activities.
• Assisting with audits.
• Operationalizing systems to monitor and ensure regulatory requirements and industry best practices.

The Sr. GRC Analyst partners with internal and external stakeholders to support the business through:

• Process development and improvement.
• Assessments, documentation, reviews, reporting, and analytics.
• Developing and strengthening privacy program operations.
• Promoting efficient, sustainable processes while translating complex privacy and data protection topics for nontechnical audiences.

Qualifications

• Five or more years of experience in IT or enterprise risk management, IT or operational audit, or a related field.
• Demonstrating knowledge of third-party risk, privacy, information security, compliance requirements, and control implementation.
• Knowledge of the NIST CSF and C2M2 maturity frameworks and relevant assessment practices.
• Experience assessing risk, control design, and control effectiveness for IT and operational controls.
• Competence in managing audit requests, writing narratives, documenting & submitting evidence, and following up.
• Experience contributing to complex projects that include stakeholders from multiple business processes.
• Ability to own your own workflow and manage multiple priorities.

Requirements

• ServiceNow GRC modules: Integrated Risk Management, Third-Party Risk Management and/or Privacy Management.
• Jira Cloud project management software.
• NIST Cybersecurity Framework 1.1 and/or 2.0, and the Cybersecurity Capability Maturity Model for OT systems (C2M2).
• Strong collaboration and communication skills and the ability to engage effectively with peers and leadership.
• Data analytics, reporting, and presenting metrics to leadership.

Working Conditions

• Remote office setting; prolonged periods of computer-based work and virtual collaboration.
• Minimal travel requirements, up to 5%.

Company Description

Valvoline Global is an equal opportunity employer. We are dedicated to fostering an environment where every individual feels valued, respected, and empowered to contribute their unique perspectives and skills. We strictly prohibit discrimination and harassment of any kind, regardless of race, color, religion, age, sex, national origin, disability, genetics, veteran status, sexual orientation, gender identity, or any other legally protected characteristic.

We are committed to ensuring accessibility throughout our recruitment process. If you require a reasonable accommodation to participate in any stage of the recruitment or selection process, please contact us at:

• Email: [email protected]

This contact information is solely for accommodation requests. For inquiries about application status, please use the appropriate channels listed in your application materials.