GRC Analyst

About the role

MACOM is looking for a motivated and detail‑oriented GRC Analyst to join its Information Security team. You will support governance, risk, and compliance initiatives across the organization, focusing on regulatory alignment, third‑party risk, and policy management.

Key responsibilities

• Assist in implementing, maintaining, and monitoring compliance frameworks such as NIST, ISO 27001, SOX, SOC2, and CIS.
• Support internal and external audit activities, including evidence collection and control validation.
• Track and report on compliance status, gaps, and remediation efforts.
• Conduct vendor risk assessments, maintain a vendor inventory, and collaborate with business owners on risk mitigation.
• Support the information security risk‑management lifecycle, including risk identification, assessment, documentation, and tracking.
• Help draft, review, and maintain security policies, standards, and procedures, ensuring alignment with regulations and best practices.
• Learn and assist with ServiceNow GRC administration, configuring workflows and improving processes.

Required profile

• Foundational knowledge of information security principles.
• Strong analytical and problem‑solving abilities.
• Willingness to learn and grow within the GRC domain.
• Excellent communication and collaboration skills.

Required skills

• ServiceNow GRC platform.
• Familiarity with NIST, ISO 27001, SOX, SOC2, and CIS frameworks.