Cybersecurity Governance, Risk & Compliance Analyst (GRC Analyst)
Global Service Center- Costa Rica
Apply NowEmployment Type
Compensation Range
Job Profile Summary
Resumen de la Empresa
Sysco conecta al mundo para compartir alimentos y cuidar unos de otros. Sysco lidera desde el corazón de la comida y el servicio para ofrecer los alimentos más frescos e ideas innovadoras a restaurantes, centros de salud, instituciones educativas, establecimientos de hospedaje y otros clientes que preparan comidas fuera del hogar. Nuestros clientes pueden contar con nosotros para entregar productos y soluciones precisas, ya que solo Sysco es el líder global que se encuentra en el centro de la innovación en suministro, entrega, cocina y más.
Description
Cybersecurity Governance, Risk & Compliance Analyst (GRC Analyst)
The Analyst will be responsible for the planning and coordination of cybersecurity operational activities to ensure adherence to government regulations, industry standards, and corporate policies. This role includes implementing training, recording and tracking violations, following through on remediation, and ensuring continuous compliance across departments. The associate will also conduct ongoing research to stay up to date with evolving regulations and work closely with leadership and other departments to strengthen the organization’s cybersecurity governance framework.
Primary Responsibilities
Execute cybersecurity due diligence activities, partnering with business and technology teams to identify, assess, and communicate cyber risks across the enterprise.
Perform risk assessments and support the management of risk registers to ensure accurate tracking and remediation of identified issues.
Support and enhance cyber governance and compliance initiatives, ensuring alignment with internal policies and external regulations.
Apply NIST Cybersecurity Framework (CSF) and other industry standards to evaluate and improve the organization’s security posture.
Utilize RSA Archer (or similar GRC tools) for risk management, reporting, and exception tracking.
Design, build, and communicate metrics, dashboards, and compliance reporting for senior leadership.
Support exception management processes, documenting, tracking, and closing out risk exceptions in collaboration with stakeholders.
Design and implement continuous improvement opportunities to reduce cyber risk and improve process efficiency using industry best practices.
Report findings, rate the risk associated with each, and collaborate with technical teams to ensure timely remediation.
Monitor and maintain compliance with applicable cybersecurity policies, frameworks, and standards (e.g., NIST, ISO 27001, SOX, GDPR).
Education
Bachelor’s Degree in Information Technology, Information Systems, Computer Science, or a related technical field.
(Equivalent experience may be considered in lieu of formal education.)
Experience
5 years of experience in cybersecurity, particularly in governance, risk management, compliance (GRC), risk assessment, or audit.
Strong experience in cybersecurity project management and budget oversight.
Proven experience with NIST CSF, Archer GRC, and compliance monitoring frameworks.
Solid background in cyber risk management, process improvement, and security control assessments.
Experience in large enterprise or multinational environments.
Excellent oral and written communication skills, with the ability to engage and influence senior stakeholders.
Certifications
- Cybersecurity certification (e.g., CompTIA Security+, CySA+, or equivalent).
- CISSP, CISM, CTPRP, or other advanced governance and risk management certifications.
Skills
Strong knowledge of cyber governance, risk, and compliance frameworks.
Proficient with risk assessment methodologies, exception management, and control validation.
Excellent analytical, organizational, and strategic planning skills.
Comfortable working in cross-functional, global teams and managing competing priorities.
Ability to make decisions with incomplete information in dynamic environments.
Strong documentation, presentation, and stakeholder management skills.
Ability to work independently while collaborating with geographically dispersed teams.
Language Requirements
Fluency in written and spoken English (minimum B2+).
About the Position:
- This is a hybrid position with on-site presence required based on business needs. (Ultra park II Lagunilla, Heredia)
- Private Medical Insurance
- Asociacion Solidarista
- Life Insurance
- Personal Day Off
Overview
Affirmative Action Statement
Apply Now
