Analyst, IT Security GRC - Data Privacy & Third Party

3 month contract to hire, 2x week onsite in Charlotte, NCMust-Haves:2–5 years of experience in IT Compliance, Information Security, Data Privacy, Risk Management, Audit, or GRCExperience supporting cybersecurity and privacy risk assessmentsKnowledge of data privacy regulations and security best practicesExperience with third-party/vendor risk management processesExperience supporting audits, evidence collection, and compliance documentationExperience maintaining risk registers and remediation activitiesStrong communication, documentation, and stakeholder management skillsExperience using GRC, privacy, or risk management platformsPlusses:Experience conducting PIAs and DPIAsStrong vendor risk management backgroundKnowledge of NIST, ISO 27001, SOC 2, or related frameworksSecurity+, CISA, CGRC, CRISC, or CISSP certificationsSOX or ITGC experienceBachelor's degree in a related fieldDay-to-Day:Conduct third-party cybersecurity and privacy risk reviewsSupport enterprise data privacy initiatives and governance effortsMaintain data inventories, classifications, retention, and protection programsAssist with privacy assessments including PIAs and DPIAsPerform cybersecurity risk assessments across vendors and business processesMaintain risk registers and track remediation effortsCoordinate audit activities and documentation requestsSupport policy exception management and corrective action plansDevelop dashboards, compliance metrics, and risk reportingPartner with Legal, HR, IT, Security, and business teams to strengthen privacy and vendor governance practicesJob Description:Insight Global is seeking an Analyst, IT Security GRC for a top industrial services and equipment rental client. This position will focus primarily on enterprise data privacy initiatives and third-party risk management activities within a newly established GRC team. The ideal candidate will support vendor risk assessments, privacy compliance efforts, data governance initiatives, remediation tracking, and cybersecurity risk management processes. This role offers an opportunity to play a key part in shaping the organization's privacy and third-party risk program while partnering with stakeholders across Security, Legal, HR, Infrastructure, Cloud, and business operations.Top Initiatives:Build out a brand-new GRC platformDrive ISO 27001 and compliance framework maturityEstablish governance processes, policies, and security standards