ASSYST is seeking an Information Security GRC Analyst to support a client by administering and maintaining an enterprise Governance, Risk, and Compliance (GRC) program. The role focuses on policy exception management and maintaining the Enterprise Information Security Risk Register using ServiceNow Integrated Risk Management (IRM). Under the guidance of Information Security leadership, the analyst will execute established governance processes, document and track information security risks, and assist with enterprise risk management activities. Responsibilities include reviewing policy exception requests, preparing governance documentation, producing metrics and dashboards, and ensuring data integrity across risk records. This position emphasizes governance, documentation, and risk management activities and does not involve security assessments, penetration testing, vulnerability assessments, audits, or compliance reviews. This is an on-site role located in Rockville, Maryland.

ASSYST is seeking an Information Security GRC Analyst to support a client by administering and maintaining an enterprise Governance, Risk, and Compliance (GRC) program. The role focuses on policy exception management and maintaining the Enterprise Information Security Risk Register using ServiceNow Integrated Risk Management (IRM). Under the guidance of Information Security leadership, the analyst will execute established governance processes, document and track information security risks, and assist with enterprise risk management activities. Responsibilities include reviewing policy exception requests, preparing governance documentation, producing metrics and dashboards, and ensuring data integrity across risk records. This position emphasizes governance, documentation, and risk management activities and does not involve security assessments, penetration testing, vulnerability assessments, audits, or compliance reviews. This is an on-site role located in Rockville, Maryland.