Principal Grc Technology Analyst

**OPENTEXT - THE INFORMATION COMPANY**

As the Information Company, our mission at OpenText is to create software solutions and deliver services that redefine the future of digital. Be part of a winning team that leads the way in Enterprise Information Management.

**Life At Opentext**

At OpenText and in IT, we believe in every employee having meaningful, purposeful work. By joining our team, you will join a community of supportive and collaborative peers focused on innovation, teamwork, and driving successful outcomes. You’ll be expected to bring with you an ideation and “Yes, if” mindset. And, as you build your network and demonstrate your professional excellence, you will have the opportunity to forge your own career path and professional growth.

**The Opportunity**

Principal GRC Technology Analyst will have the opportunity to impact meaningfully and contribute to the OpenText IT Compliance Program in accordance with ISO 27001, PCI-DSS, SOC1/2, HIPAA, SOC2+HITRUST and FedRAMP. The Principal GRC Technology Analyst plays a key role in the continued development and maturity of an ever-growing Security Compliance Program that supports the delivery of compliance certifications to support customer security requirements. This role will operate in OpenText’s second line of defense within the overall IT control environment. In this role, you will support our enablement and optimization of various compliance programs through automation in our GRC tools.

**You Are Great At**
- Hands on building GRC solutions and other compliance tools.
- Passionate about people, processes and technology that enable us to achieve our compliance certifications.
- Drive control automation and support process improvement in the delivery of OpenText’s Compliance portfolio.
- Contributing to the ongoing strategy of enablement of technology through business intelligence, automation to support the compliance and control environment.
- Collaborating cross-functionally within our technology, compliance, and business stakeholders to identify requirements to drive automation and supporting process improvements in the compliance portfolio.
- Champion a process of continuous improvement through effective tools and organizational change management.
- Manage an effective centralized control data management process.
- Facilitate design sessions to identify detailed system requirements.
- Working knowledge of security controls, audit lifecycle and the roles of key stakeholders in a Security Compliance Program.

**What It Takes**
- 5+ years of experience in IT audit and/or compliance, with a background GRC tools deployment and support.
- Experience with GRC Tools such as ServiceNow GRC.
- Experience with continuous control monitoring programs and leading practices of control automation.
- A background of data analytics with tools such as Microsoft PowerBi.
- Strong technical, analytical, interpersonal, communication and writing skills.
- A background of evaluating the design and effectiveness of controls and experience working with auditors/regulators for compliance assessments.
- Ability to work both independently and within a global team environment.
- Strong project management experience.
- The ability to operate in a dynamic environment and handle numerous concurrent projects with a sense of urgency and ownership.
- Demonstrated strength in working in a constantly changing environment.
- Effective team collaboration plus the ability to coach and mentor others.
- Strong personal characteristics as demonstrated by the following: Owner’s mindset, achievement-oriented, self-controlled, self-confident, flexible, approachable, and dedicated.
- General working knowledge of industry compliance frameworks (SOC 2, ISO 27001, PCI DSS, HIPAA/HITRUST, FEDRAMP, etc.) for assigned cloud.
- Experience delivering compliance programs in GCP, AWS, Azure is a plus.
- Bachelor’s Degree in Information Technology, Business, or related vocations.