ROLE OVERVIEW
We are looking for a detail-oriented and knowledgeable GRC Security Analyst to join our Governance, Risk & Compliance team. This role is central to managing regulatory compliance, security governance, and risk management activities across the enterprise. The successful candidate will play a key role in driving and maintaining security and compliance frameworks, managing audit processes, and ensuring data protection and security controls are enforced across Pinnacle’s systems, including cloud, on-prem, and user-facing platforms.
Additionally, the GRC Security Analyst will be responsible for coordinating and facilitating maintenance window activities to support continuous IT infrastructure improvements.

KEY RESPONSIBILITIES

Governance, Risk & Compliance
- Perform ongoing risk assessments and maintain a risk register.
- Conduct internal compliance audits and prepare for external assessments (ISO 27001, PCI DSS, GDPR).
- Implement and manage Microsoft Purview policies
- Develop and enforce security governance frameworks and policies.
- Support user access reviews and IAM compliance enforcement.
- Track remediation of audit findings and compliance gaps.
- Maintain compliance with data protection and privacy standards.

Downtime and Maintenance Coordination
- Schedule and coordinate maintenance window meetings with IT and security stakeholders.
- Ensure all system changes and downtimes are logged, reviewed for impact, and comply with change management policies.
- Document, track, and report on the outcomes of change-related meetings.
- Manage communication within organization and with external partners

Collaboration & Support

- Liaise with the Security Engineering and SOC teams to validate control implementation.
- Support training and awareness programs on security governance and user responsibilities.
- Assist in the preparation and delivery of reports for senior management and auditors.