FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Governance, Risk & Compliance Analyst
Brooks Automation. Support and maintain Brooks' ISO 27001 Information Security Management System (ISMS) .
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in Governance, Risk & Compliance, with a strong focus on ISO 27001 and NIST frameworks. Capable of managing audits, risk assessments, and security awareness initiatives while effectively communicating with diverse stakeholders.
Highest-signal resume keywords
ISO 27001 ExperienceGovernance, Risk & ComplianceInformation Security PrinciplesStrong Written CommunicationRisk Management
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Risk AssessmentAudit CoordinationPolicy DevelopmentControl OwnershipIncident ManagementRisk Treatment PlanningCompliance InitiativesDocumentation ManagementMetrics DevelopmentContinuous Improvement
Soft Skills
Strong Organizational SkillsAttention to DetailEffective CommunicationProject ManagementStakeholder Engagement
Tools & Technologies
Risk DashboardsEvidence RepositoriesSecurity Awareness Training ProgramsPhishing Simulation ToolsGovernance Documentation
Certifications & Qualifications
Security+ISO 27001 Internal AuditorISO 27001 Lead AuditorCRISCCISACISSP
Industry Keywords
NIST Cybersecurity FrameworkNIST 800-171GDPRCyber Resilience ActThird-Party Risk Management
Tech Stack
Tools & technologiesCyber Security
About the role
Key responsibilities & impact- Support and maintain Brooks' ISO 27001 Information Security Management System (ISMS)
- Coordinate internal, external, surveillance, and certification audits
- Assist with policy development, reviews, standards, procedures, and governance documentation
- Maintain control ownership, evidence repositories, and audit readiness documentation
- Coordinate remediation tracking and corrective action plans
- Facilitate cybersecurity risk assessments and business impact discussions
- Maintain risk registers and assist control owners with mitigation planning
- Track risk treatment plans and exceptions
- Support management reporting, metrics, and risk dashboards
- Respond to customer security questionnaires and due diligence requests
- Support supplier and third-party security reviews
- Assist with regulatory and customer requirements including ISO 27001, NIST Cybersecurity Framework, NIST 800-171, GDPR, Cyber Resilience Act, and semiconductor customer security requirements
- Partner with Legal and business stakeholders on security-related contractual requirements
- Coordinate annual security awareness training campaigns
- Manage phishing simulation programs and track participation and compliance metrics
- Develop security awareness communications and educational materials
- Support incident management governance activities
- Ensure incidents are properly documented and tracked
- Assist with lessons learned and corrective action reviews
- Support Security Council activities and management reviews
- Develop metrics, dashboards, and executive reporting
- Assist with annual policy reviews and governance initiatives
- Drive continuous improvement activities across the security program
- Work directly with the CISO and stakeholders across IT, Engineering, Product, Legal, HR, Operations, and Quality
Requirements
What you’ll need- 5-7 years of experience in Governance, Risk & Compliance, Information Security, Internal Audit, IT Audit, Risk Management, or related discipline
- Working knowledge of information security principles and controls
- Experience supporting compliance initiatives or audits
- Strong written communication and documentation skills
- Ability to communicate effectively with both technical and non-technical stakeholders
- Strong organizational skills and attention to detail
- Ability to manage multiple projects and deadlines simultaneously
- Preferred: Experience with ISO 27001
- Preferred: Experience supporting SOC, SOX, or regulatory audits
- Preferred: Experience with customer security questionnaires
- Preferred: Knowledge of NIST CSF, NIST 800-171, GDPR, or CRA
- Preferred: Experience with third-party risk management
- Preferred: Security certifications such as Security+, ISO 27001 Internal Auditor, ISO 27001 Lead Auditor, CRISC, CISA, CISSP (Associate or Full)
Benefits
Comp & perks- Flexible work arrangements may include a mix of in-office and remote work, depending on the nature of the role and business needs
- Equal-opportunity workplace
- Workplace accommodations for applicants with disabilities