Jobs-GRC-Analyst

Privacy and Data Protection GRC Analyst (part-time)

Tel Aviv | Hybrid | Part-time

About Entero

Entero is a global compliance consulting firm specializing in tech, digital consumer protection, and data protection. We serve small and medium-sized tech companies across various industries, providing expert guidance on privacy, data protection, AI, and consumer protection. Our solutions include compliance program development, GRC program integration, trust and compliance portals, and ongoing regulatory advisory services.

Role Overview

A Governance, Risk, and Compliance (GRC) Analyst (part-time) is responsible for supporting clients’ GRC operations and teams by assisting with assessing, documenting and maintaining data mapping, compliance records, risk assessments, compliance checks, and monitoring activities under the supervision of the GRC Manager or Data Protection consultants at Entero.

This entry-level role is integral to building a foundation in privacy and data protection GRC practices for clients’ organizations, as it involves the assessment, mapping and documenting of data collection, processing usage and retention (including documentation of data processing activities), preparing reports, and ensuring that policies are communicated, updated and followed across departments.

Junior GRC Analysts help maintain the clients’ organization’s compliance posture and support risk management efforts through operational and administrative tasks.

Key Responsibilities

1. Compliance checks and product reviews, including compliance and risk management reports
2. Mapping and documenting records of data flows and data processing activities
3. Compliance Monitoring and Auditing of clients’ digital assets, products, services and conduct
4. Research and reporting; assisting with research of new regulatory and GRC requirements and assisting in integrating them into the client’s workflows.
5. Policy and Procedure Support: Help develop, update, and maintain GRC policies and procedures, ensuring they are current and accessible; Assist in communicating policies across the clients organizations and answering basic questions on compliance requirements.
6. Support Risk Assessments: Support the risk assessment process by collecting relevant data and updating risk registers with findings from assessments; Track the status of risk mitigation efforts and update documentation accordingly.
7. Documentation and Reporting: Assist in preparing GRC reports for management, including compliance metrics, audit findings, status updates on risk assessments, and executive reports; Maintain accurate records of GRC activities and audit trails to ensure transparency and traceability.
8. GRC Tools: Support the use of GRC software and tools, including data entry, updates, and troubleshooting basic technical issues; Assist in generating reports from GRC systems to support senior analysts and managers.
9. Training and Awareness Support: Help with GRC training initiatives by coordinating training sessions, preparing and distributing materials, and documenting participation and scores; Assist in creating awareness about GRC policies and practices across the organization.
10. Taking part in meetings with clients and respective teams, and assisting with project management and delivery monitoring.

Essential Skills and Qualifications

Advanced student or a bachelor of business administration or, information systems or, finance/accounting/economy, or a related field.
Attention to Detail: Precision in handling data, tracking compliance requirements, and documenting findings.
Communication Skills: Clear and concise communication to assist with policy clarifications and team support.
Analytical Skills: Basic ability to interpret data and identify trends, with guidance from senior team members.
Technical Skills: Familiarity with GRC or auditing software (advantage), along with proficiency in Google Drive tools (particularly G-sheet and Forms).
Knowledge: familiarity with technical terminology, digital tools, G-Drive (workspace) tools (advantage: GRC software/tools, ClickUP/Monday.com)
Fluent in English (both spoken and written)

Apply now

Learning and Development Opportunities

A junior/part-time role in privacy and data protection GRC is ideal for building knowledge in data protection frameworks, risk management, compliance standards, and audit processes. Junior GRC Analysts gain hands-on experience in data mapping, compliance assessment, risk assessments and compliance monitoring, which are foundational skills for advancing to more senior roles in Data Protection, GRC or other risk-related fields. They also build an understanding of regulatory standards like GDPR, CCPA/CPRA, which are crucial for career growth in Data protection GRC.