Boeing

SeniorGovernance,Risk,andCompliance(GRC)ProcessAnalyst

$118–160k Mesa, Arizona, United States; Dallas, Texas, United States; Colorado Springs, Colorado, United States; Fort Walton Beach, Florida, United States; Jacksonville, Florida, United States; Miami, Florida, United States; North Charleston, South Carolina, United States; Ridley Park, Pennsylvania, United States; Portland, Oregon, United States; Salt Lake City, Utah, United States; San Antonio, Texas, United States; Seal Beach, California, United States; Seattle, Washington, United States; Berkeley, Missouri, United States FULL TIME
Market Sentiment
HIGH DEMAND

Neural analysis suggests this role is
optimal for Senior candidates.

The Brief

“Senior Governance, Risk, and Compliance (GRC) Process Analyst at Boeing. Skills: Governance, Risk, Compliance, GRC. Support GRC framework. Support policies”

Industry & Context.

Problems you'll solve

Root cause corrective analysis

Eligibility Requirements

U. S. Person required, Export control compliance

What They're Looking For.

Must Have

5+ years GRC experience, 5+ years IT Audit experience, 5+ years Information Security experience, 5+ years vulnerability management experience, 5+ years Compliance experience, 5+ years SOX ITGC experience, 5+ years Security Controls experience, 5+ years Vulnerability Management processes experience, 5+ years Audit lifecycle experience, 5+ years compliance practices experience, 3+ years GRC tools experience, 3+ years infrastructure experience, 3+ years network experience, 3+ years database experience, 3+ years operating systems experience, 3+ years IAM experience, 3+ years change management experience, 3+ years periodic reconciliations experience, 3+ years industry security standards experience, 3+ years NIST experience, 3+ years ISO 27001 experience, 3+ years COBIT experience, 3+ years OWASP experience, 3+ years risk management experience, 3+ years root cause corrective analysis experience, 5+ years managing competing priorities, 5+ years consulting experience, 5+ years strategic role experience, Excellent communication skills, Excellent presentation skills

Nice to Have

10+ years related work experience, 10+ years GRC experience, 10+ years IT Audit experience, 10+ years Information Security experience, 10+ years vulnerability management experience, 10+ years Compliance experience, 10+ years SOX ITGC experience, 10+ years Risk Management methodologies experience, 10+ years Security Controls experience, 10+ years Vulnerability Management processes experience, 10+ years Audit lifecycle experience, 10+ years compliance practices experience, 5+ years GRC tools experience, 10+ years infrastructure experience, 5+ years network experience, 5+ years database experience, 5+ years operating systems experience, 5+ years IAM experience, 5+ years change management experience, 5+ years periodic reconciliations experience, 5+ years industry security standards experience, 5+ years NIST experience, 5+ years ISO 27001 experience, 5+ years COBIT experience, 5+ years OWASP experience, 5+ years risk management experience, 5+ years root cause corrective analysis experience

What You'll Do.

Support GRC framework

Conduct risk assessments

Maintain enterprise risk registers

Identify technology risks

Assess technology risks

Track technology risk remediation

Identify cybersecurity risks

Assess cybersecurity risks

Track cybersecurity risk remediation

Assist third-party risk assessments

Assist vendor risk assessments

Assist compliance reviews

Monitor internal policy compliance

Monitor regulatory compliance

Support ITGC compliance

Support SOX compliance

Coordinate control testing

Coordinate evidence collection

Coordinate remediation tracking

Work with control owners

Ensure SOX control design effectiveness

Ensure SOX control operational effectiveness

Assist external audits

Assist internal audits

Maintain SOX control documentation

Maintain SOX narratives

Maintain SOX process flows

Coordinate vulnerability management

Track vulnerability remediation

Track security findings remediation

Support access reviews

Support security compliance assessments

Prepare audit evidence

Coordinate audit requests

Track remediation plans

Assist audit readiness initiatives

Assist continuous monitoring activities

Develop compliance reports

Maintain risk documentation

Maintain control documentation

Maintain finding documentation

Maintain remediation documentation

Support policy reviews

Support procedure reviews

Support automation for SOX controls

Identify scope for automation

Recommend automation options

Define computing standards

Deploy computing standards

Evaluate computing standards

Support computing standards

Evaluate IT processes

Define process metrics

Deploy process metrics

Evaluate process metrics

Support process metrics

Define plans for standards

Define plans for processes

Identify improvement measures

Advise on key parameters

Define common process requirements

Develop common process requirements

Deploy common process requirements

Define infrastructure products

Develop infrastructure products

Deploy infrastructure products

Define infrastructure services

Develop infrastructure services

Deploy infrastructure services

Educate on IT common processes

Promote use of IT common processes

Educate on IT methodologies

Promote use of IT methodologies

Educate on IT products

Promote use of IT products

Educate on IT services

Promote use of IT services

Consult in common processes

Coach in common processes

Lead common processes for software development

Lead common processes for software maintenance

Review new technology

Evaluate new technology

Support software process impact

Integrate architecture mapping

How You'll Work.

Team & Collaboration

Partner with Information Security; Partner with IT&O; Partner with Internal Audit; Partner with Compliance; Partner with SOX; Partner with External Audit; Partner with Business stakeholders; Work with control owners; Liaison between IT/Security; Liaison between Auditors

Communication Scope

Presentation skills

Full Job Description

Senior Governance, Risk, and Compliance (GRC) Process Analyst **Company:** The Boeing Company Boeing is seeking a detail-oriented and analytical **Senior****Governance, Risk, and Compliance (****GRC) Process Analyst** to support governance, risk, and compliance initiatives for Infrastructure team at our **Mesa, AZ; Dallas, TX; Colorado Springs, CO; Fort Walton Beach, FL; Jacksonville, FL; Miami, FL; North Charleston, SC; Ridley Park, PA; Portland, OR; Salt Lake City, UT; San Antonio, TX; Seal Beach, CA; Seattle, WA; or Berkeley, MO.** The ideal candidate will have experience in SOX compliance, vulnerability management coordination, risk assessments, security controls validation, and corporate/internal audit support. This role will partner with Information Security, IT&O, Internal Audit, Compliance, SOX, External Audit, and Business stakeholders to ensure compliance with regulatory requirements, strengthen security posture, and maintain effective internal controls. **Position Responsibilities:** * Support the organization’s GRC framework, policies, standards, and procedures * Conduct risk assessments and maintain enterprise risk registers. * Identify, assess, and track remediation of technology and cybersecurity risks * Assist in third-party/vendor risk assessments and compliance reviews * Monitor compliance with internal policies and regulatory requirements * Support ITGC (IT General Controls) and SOX compliance activities * Coordinate control testing, evidence collection, and remediation tracking * Work with control owners to ensure Design effectiveness and operational effectiveness of SOX controls * Assist during external and internal SOX audits * Maintain documentation for SOX controls, narratives, and process flows * Coordinate vulnerability management activities with infrastructure teams * Track remediation of identified vulnerabilities and security findings. * Support periodic access reviews and security compliance assessments * Act as liaison between IT/Secur

Free ATS check

Applying for this Senior Governance, Risk, and Compliance (GRC) Process Analyst role?

Most applicants get filtered before a human reads their resume. See if yours makes the cut.

How to Apply on Workday

  • Workday has a multi-step form — save your progress after every section.
  • "Apply With LinkedIn" can fail or lose data; manual entry is more reliable.
  • Watch for the "Submit for Review" final step — hitting "Save" alone does not submit.
  • Job requisition numbers are useful when following up with HR by email.

ANONYMOUS · UNFILTERED

What do employees actually say about Boeing?

Real rants from real employees. Read before you apply.

Read Company Rants →