About This Role
This GRC Analyst III role serves as a lead contributor within the Information Security organization, helping to design, build, and mature Reliance’s enterprise Governance, Risk & Compliance program from the ground up. The position involves leading day-to-day GRC program execution, including platform implementation, control framework development, policy and exception governance, enterprise risk tracking, compliance evidence management, third-party risk coordination, and executive-ready reporting. It requires a hands-on lead who can translate regulatory and security requirements into practical operating procedures, drive accountability across teams, and mentor junior contributors.
Responsibilities
- Lead the implementation and operational buildout of Reliance’s enterprise Governance, Risk & Compliance program
- Help define the target-state GRC operating model, including program processes, roles and responsibilities, intake channels, workflows, reporting expectations, and governance routines
- Lead configuration, rollout, data quality, and continuous improvement of the GRC platform, including risk registers, control libraries, assessment workflows, issue tracking, exception management, and dashboards
- Create practical procedures, templates, standards, and operating documentation that allow the GRC program to scale across business units and control owners
- Establish repeatable processes for identifying, assessing, documenting, and reporting information security and compliance risk
- Lead risk assessments with technical, business, and compliance stakeholders
- Document risks, control gaps, compensating controls, remediation plans, owners, due dates, and residual risk decisions
- Develop and maintain risk dashboards, KPIs, KRIs, and leadership reporting that communicate risk posture, remediation progress, exception aging, audit readiness, and control performance
- Translate findings from assessments, audits, vulnerability reviews, vendor reviews, and security tools into prioritized risk records and action plans
- Lead consistent governance practices for policy lifecycle management and risk-based exceptions
- Coordinate policy and standard review cycles, stakeholder feedback, approvals, publication, acknowledgements, and related evidence
- Design and operate an exception process covering intake, risk evaluation, documentation, approval routing, renewal cadence, and closure tracking
- Partner with control owners to ensure exceptions clearly document business need and risk rationale
Requirements
- Ability to stand or sit (stationary position)
- Ability to walk (move, traverse)
- Ability to use hands/fingers to handle or feel (operate, activate, use, prepare, inspect, place, detect, position)
- Ability to talk/hear (communicate, detect, converse with, discern, convey, express oneself, exchange information)
