GRC Analyst

About the role

The GRC Analyst ensures the integrity and up‑to‑date status of MyPass's third‑party provider, risk, policy, and CAPA registers. Working closely with the Senior Corporate Services Manager, the role supports ISMS ownership, audit obligations, and coordination across multiple compliance platforms.

Key responsibilities

• Monitor policy lifecycle, coordinate reviews, publish approved policies in Confluence and Drata, and maintain controlled document registers.
• Support risk register activities in Drata, schedule assessments, gather evidence, and report on review completion.
• Oversee Drata control readiness, create Jira tickets for remediation, track personnel compliance, and maintain the evidence register.
• Maintain third‑party provider register, coordinate vendor due diligence, and ensure contract records are current.
• Own the CAPA register in QT9, expedite evidence collection, prepare review materials, and manage end‑to‑end CAPA workflows.
• Assist the internal audit programme by providing CAPA support and related documentation.

Required profile

• Demonstrated ability to maintain and update policy, risk, and CAPA registers.
• Familiarity with ISMS processes and audit support activities.
• Strong coordination skills with internal and external stakeholders.

Required skills

• Confluence
• Drata
• Jira
• Google Workspace
• QT9

What we offer

• Opportunity to work in a multi‑award‑winning compliance software company.
• Exposure to high‑stakes industries and cutting‑edge digital workforce solutions.
• Collaborative environment with global expansion prospects.