IS GRC Analyst - Compliance (Contract)

At AlixPartners, we solve the most complex and critical challenges by moving quickly from analysis to action when it really matters; creating value that has a lasting impact on companies, their people, and the communities they serve. By understanding, respecting, and honoring the needs of our employees, clients, and communities, AlixPartners actively promotes an inclusive environment. We strongly believe in the value that diversity brings to our experiences and are committed to the perpetual enhancements of initiatives, policies, and practices. We hold ourselves accountable by providing the space for authenticity, growth, and equity for everyone.

AlixPartners has embraced a hybrid work model to provide flexibility and support our employees' work-life integration. Our hybrid model combines a mix of in-person at an AlixPartners office on Tuesday, Wednesday, & Thursday, and remote working options for Monday and Friday.

What you'll do

As a member of the Information Security team, the IS GRC Analyst will be responsible for understanding the firm's access governance and compliance requirements. The IS GRC Analyst assists in the access review processes. This person will consult and interface with system administrators, onboarding and offboarding teams, service desk, IT staff, and non-IT departments to understand requirements to develop actionable plans. The IS GRC Analyst will help execute the approved roadmap, facilitate workshops with IT and non-IT departments that manage access controls and support refining the program's effectiveness.

The Information Security (IS) Governance, Risk, and Compliance (GRC) Analyst is a full-time, contract position in Southfield, MI, reporting to the Information Security Governance, Risk, and Compliance Lead and IS GRC Manager. Assignment is expected to run through the end of 2025, with potential for extension.

• Facilitate the implementation and monitoring of controls that support the TISAX certification of SharePoint and Microsoft Teams.
• Set up and execute access certification processes for SharePoint and Microsoft Teams.
• Monitor implemented controls to ensure they are working well; escalate any discrepancies with key stakeholders.
• Collaborate with cross-functional teams to develop risk mitigation strategies.
• Identify and escalate risks to Security Risk team.
• Write and update existing procedures as necessary.
• Keep current on security industry trends, new threats & attack techniques, mitigation techniques, & emerging security technologies.
• Successfully manage multiple priorities and deadlines.
• Measure and report metrics to IS GRC Director and CISO.
• Improve security efficiency, streamline, and automate work processes while working collaboratively with other team members and IT staff to accomplish objectives.
• Participate, as needed, in critical incidents & implementation reviews.
• Additional responsibilities as identified. This description is not designed to encompass a comprehensive listing of required activities, duties, or responsibilities.

What you'll need

• Bachelor's degree in information technology or related field recommended; relevant experience may be considered in lieu of education.
• Minimum one year of professional experience highly preferred.
• Familiarity with cybersecurity standards such as ISO 27001.
• Good knowledge of Microsoft Teams and SharePoint structure and administration.
• Good understanding of user permissions and access controls within Microsoft Teams and SharePoint, leveraging Entra ID for identity management.
• Experience within Information Security, Risk, Compliance, Audit, or Information Technology is preferred.
• Excellent written and verbal communication skills in English to support security programs.
• Must possess high attention to detail and the ability to prioritize work while successfully managing multiple projects and deadlines.
• Proficient with Microsoft Office Suite (Word, Excel, PowerPoint, SharePoint etc.).
• Core working hours are generally 8:30 AM - 5:30 PM, Monday - Friday; willingness to work outside of normal U.S. business hours, and as unique projects/needs arise.
• Ability to work full time in an office and remote environment; physically able to sit/stand at a computer and work in front of a computer screen for significant portions of the workday.
• Must become familiar with, and promote and abide by, our Core Values as defined by the AlixPartners'Code of Conduct and foster an inclusive environment with people at all levels of an organization.

MUST BE CURRENTLY AUTHORIZED TO WORK IN THE UNITED STATES. NO VISA OR IMMIGRATION SPONSORSHIP FOR THIS ROLE, NOW OR IN THE FUTURE. (e.g., H-1B, STEM OPT, TN, etc.)

AlixPartners is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to, among other things, race, color, religion, sex, sexual orientation, gender identity, national origin, age, status as a protected veteran, or disability. AlixPartners is a proud Silver award-winning Veteran Friendly Employer.