IT Security GRC Analyst (Data Privacy Focus)

Insight Global is seeking an Analyst, IT Security GRC for a top industrial services and equipment rental client. This position will focus primarily on enterprise data privacy initiatives and third-party risk management activities within a newly established GRC team. The ideal candidate will support vendor risk assessments, privacy compliance efforts, data governance initiatives, remediation tracking, and cybersecurity risk management processes. This role offers an opportunity to play a key part in shaping the organization's privacy and third-party risk program while partnering with stakeholders across Security, Legal, HR, Infrastructure, Cloud, and business operations. This is a 3-6 month contract to hire role, hybrid in Charlotte NC.
Top Initiatives:
• Build out a brand-new GRC platform
• Drive ISO 27001 and compliance framework maturity
Establish governance processes, policies, and security standards

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to HR@insightglobal.com.To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.

• 2–5 years of experience in IT Compliance, Information Security, Data Privacy, Risk Management, Audit, or GRC
• Experience supporting cybersecurity and privacy risk assessments
• Knowledge of data privacy regulations and security best practices
• Experience with third-party/vendor risk management processes
• Experience supporting audits, evidence collection, and compliance documentation
• Experience maintaining risk registers and remediation activities
• Strong communication, documentation, and stakeholder management skills
Experience using GRC, privacy, or risk management platforms

• Experience conducting PIAs and DPIAs
• Strong vendor risk management background
• Knowledge of NIST, ISO 27001, SOC 2, or related frameworks
• Security+, CISA, CGRC, CRISC, or CISSP certifications
• SOX or ITGC experience
Bachelor's degree in a related field

Benefit packages for this role will start on the 1st day of employment and include medical, dental, and vision insurance, as well as HSA, FSA, and DCFSA account options, and 401k retirement account access with employer matching. Employees in this role are also entitled to paid sick leave and/or other paid time off as provided by applicable law.