ZipRecruiter

Log In

1

Grc Risk Jobs in Missouri (NOW HIRING)

Clayco

Senior GRC Analyst

Saint Louis, MO · On-site

The analyst transforms the risk register from a static document into a dynamic governance ... Engages as necessary in all GRC functions to maintain an understanding of process and procedures

Clayco

Senior GRC Analyst

Saint Louis, MO · On-site

The analyst transforms the risk register from a static document into a dynamic governance ... Engages as necessary in all GRC functions to maintain an understanding of process and procedures

Clayco

Senior GRC Analyst

Saint Louis, MO · On-site

The analyst transforms the risk register from a static document into a dynamic governance ... Engages as necessary in all GRC functions to maintain an understanding of process and procedures

Clayco

Senior GRC Analyst

Saint Louis, MO · On-site

The analyst transforms the risk register from a static document into a dynamic governance ... Engages as necessary in all GRC functions to maintain an understanding of process and procedures

Clayco

Senior GRC Analyst

Saint Louis, MO

The analyst transforms the risk register from a static document into a dynamic governance ... Engages as necessary in all GRC functions to maintain an understanding of process and procedures

Clayco

Senior GRC Analyst

Saint Louis, MO · On-site

The analyst transforms the risk register from a static document into a dynamic governance ... Engages as necessary in all GRC functions to maintain an understanding of process and procedures

Tiro Security, LLC

Snr GRC Analyst

California, MO · On-site

$100 - $150/hr

Overview Our client seeks a Sr. GRC Analyst in Orange County, CA. This is an onsite position ... Support governance, risk, and compliance activities in collaboration with the Corporate IT ...

Sky Mavis

Senior GRC Analyst

Saint Louis, MO · On-site

$85 - $110/hr

This role will assume ownership of the Third‑Party Risk Management (TPRM) process to gather ... The Sr. GRC Analyst will also assume ownership of Human Risk Management (HRM) including the ...

Subsplash

Sr. GRC Analyst

Kansas City, MO

$95K - $105K/yr

About the Role The Senior GRC Analyst acts as a strategic lead to advance security and risk operations. In this role, you will integrate people, policy, and technology to drive operational excellence ...

Jobtailor

Head of Security, GRC

California, MO · On-site

$200 - $280/hr

* Lead the organization's governance, risk, and compliance program * Ensure alignment with SEC/FINRA ... Hands-on experience leading GRC programs and risk-management initiatives * Ownership of SOC 1, SOC ...

Jobtailor

Director, Cybersecurity, GRC

California, MO · On-site

$170 - $210/hr

Own IT governance, risk, and compliance * Design a control framework synergistic across ITGC, SOC ... Lead, coach, and develop the cybersecurity and GRC team Requirements * 10+ years in cybersecurity ...

duvari group

Cybersecurity GRC Analyst

Fenton, MO

We are seeking an experienced Cybersecurity GRC Analyst for a 6-month engagement to support our ... Perform risk assessments and assist with remediation planning * Review, update, and maintain ...

duvari group

Cybersecurity GRC Analyst

Fenton, MO · On-site

We are seeking an experienced Cybersecurity GRC Analyst for a 6-month engagement to support our ... Perform risk assessments and assist with remediation planning * Review, update, and maintain ...

duvari group

Cybersecurity GRC Analyst

Fenton, MO · On-site

We are seeking an experienced Cybersecurity GRC Analyst for a 6-month engagement to support our ... Perform risk assessments and assist with remediation planning * Review, update, and maintain ...

next page

Showing results 1-20

All JobsGrc Risk JobsGrc Risk Jobs in Missouri

Grc Risk information

What is the difference between Grc Risk vs Grc Analyst?

AspectGrc RiskGrc Analyst
CertificationsISO 31000, CRISC, COSOCISA, CRISC, CISSP
Work EnvironmentRisk management teams, compliance departmentsIT, audit, compliance teams
Industry UsageFinancial, healthcare, corporate sectorsIT, finance, consulting firms
Primary FocusIdentifying and managing enterprise risksAnalyzing controls, assessing risks in systems

Grc Risk professionals focus on enterprise-wide risk management strategies, while Grc Analysts typically analyze specific controls and systems to identify vulnerabilities. Both roles require similar certifications and often work within the same industries, but Grc Risk has a broader scope in risk oversight, whereas Grc Analysts concentrate on detailed control assessments.

What are popular job titles related to Grc Risk jobs in Missouri?

For Grc Risk jobs in Missouri, the most frequently searched job titles are:

What job categories do people searching Grc Risk jobs in Missouri look for?

The top searched job categories for Grc Risk jobs in Missouri are:

Grc Risk jobs near you

Senior GRC Analyst

Clayco

Saint Louis, MO • On-site

Full-time

Medical, Dental, Vision, Life, Retirement, PTO

Re-posted 14 days ago

Clayco rating

8.6

Company rating: 8.6 out of 10

Based on 6 frontline employees who took The Breakroom Quiz

Job description

About Us
Clayco is a full-service, turnkey real estate development, master planning, architecture, engineering, and construction firm that safely delivers clients across North America the highest quality solutions on time, on budget, and above and beyond expectations. With $8.1 billion in revenue for 2025, Clayco specializes in the "art and science of building," providing fast track, efficient solutions for mission critical, industrial, life sciences, power & energy, aviation, commercial, institutional, residential and sports & entertainment related building projects.
The Role We Want You For
Under the direction of and in collaboration with the GRC Manager, the Sr. GRC Analyst, Risk Management is the primary owner and operational steward of the Enterprise Risk Register. This role is responsible for ensuring all identified risk is accurately captured, properly rated, assigned to an accountable owner, actively worked, and driven to resolution across the Clayco organization. The analyst functions as the operational hub of the risk lifecycle - from initial intake and classification through remediation coordination, escalation, stakeholder accountability, and reporting. This is a high-accountability, process-driven role that demands both technical depth and organizational influence. The analyst transforms the risk register from a static document into a dynamic governance instrument - one that delivers a clear, current, and quantified view of organizational risk exposure to leadership. Additional responsibilities will be assigned as deemed necessary. Any travel is usually planned in advance, but issues may arise which warrant immediate travel to one or more satellite locations.
The Specifics of the Role
  • Assumes the ownership and maintenance of the Enterprise Risk Register as the authoritative system of record for all identified risks across the Clayco organization.
  • Enforces rigorous data integrity standards: no missing owners, undefined due dates, stale entries, or incomplete risk descriptions.
  • Establishes and maintains a consistent process for risk creation, categorization, severity rating, and treatment classification to ensure comparability and defensibility of the data set.
  • Applies qualitative risk analysis methodologies, including likelihood/impact matrices to produce accurate, prioritized risk ratings.
  • Conducts regular audits of the risk register to surface stale, incomplete, or improperly rated entries and drive timely corrections with risk owners.
  • Maintains comprehensive documentation for each risk, including: risk description, affected assets and systems, threat source, inherent risk rating, current controls, residual risk, treatment decision, assigned owner, and target remediation date.
  • Manages the full risk lifecycle from intake through closure, including periodic re-evaluation of accepted risks to confirm continued acceptability.
  • Serve as the primary coordinator and driver of risk remediation and mitigation activities, ensuring every open risk has an actionable, time-bound treatment plan with a clearly accountable owner.
  • Collaborates with risk owners and technical teams to develop realistic remediation plans that define specific tasks, milestones, resource requirements, and completion criteria.
  • Coordinates corrective and preventive actions (CAPA) arising from audit findings, control failures, and policy exceptions, tracking each to verified closure.
  • Tracks and monitors remediation progress across all open items; proactively identify blockers, resource gaps, and at-risk milestones before they result in missed deadlines.
  • Escalates risks with insufficient remediation progress, missed SLAs, or unacceptable residual risk levels to the GRC Manager and relevant leadership with supporting data and recommended courses of action.
  • Assumes operational ownership of Vulnerability Management and External Attack Surface Management (EASM) processes:
  • In collaboration with SOC, ensures that Vulnerability Scanning output ingested into Workflow platform has high fidelity with accurate association with CI's
  • In collaboration with SOC, ensures that EASM output ingested into Workflow Platform has high fidelity with accurate association with CI's
  • Ensures effective tuning and appropriate scoring of Risk Rating algorithm
  • Ensures effective execution of assignment Rules and track remediation activity
  • Remediates Unknown/Unclassed CI's from scanning output and tune assignment Rules
  • Ensures timely and accurate reporting of active Risk and Vulnerability by severity as well as performance against Remediation targets process.
  • Collaborates cross-functionally with other Information Technology teams and Business Stakeholders across the Organization
  • Engages as necessary in all GRC functions to maintain an understanding of process and procedures
  • Provides leadership with comprehensive reports of compliance-focused activities and outcomes, as requested.

Requirements
  • 5-7+ years' experience in Risk & Compliance Assessment, Audit & Reporting, or similar functions, preferably within the Information Security or Technology fields
  • 3-4+ years working specifically in Information Security roles involving Risk Analysis, Information System Security Assessment, Compliance Audit with Regulations, Frameworks, & Standards
  • Bachelor's degree in Information Technology or related field, or equivalent experience
  • Required Certifications: Certified in Risk & Information Systems Control (CRISC), Certified Information Systems Auditor (CISA), or Certified Information Systems Security Professional (CISSP) (Current status, or obtained within 9 months of assuming role)
  • Strong experience leveraging auditing principles and methods to evaluate policies, processes, systems, and vendors to identify business risks and control gaps
  • Experience in administering Risk management programs for technology and information security
  • Strong, technical knowledge of modern Systems, Services, Cloud Applications/Platforms, Identity Services, and Data Storage/Handling and their areas of Risk and Threat exposure
  • Experience with administering, maintaining, and leveraging a Risk Register to track and communicate identified Risk and its required remediation
  • Knowledge of statistics, reporting and analytical tools to analyze and solve complex problems
  • Proficiency in necessary productivity tools (i.e. Microsoft Excel, PowerPoint, Word etc.) for analytics and presentations
  • Operate with strong integrity with ability to handle projects of a sensitive & confidential nature
  • Excellent written and verbal communication skills with a proven ability to translate technical or abstract concepts into a narrative that is easily understood by clients.
  • Ability to thrive in fast-paced environment.

Some Things You Should Know.
  • No other builder can offer the collaborative design-build approach that Clayco does.
  • We work on creative, complex, award-winning, high-profile jobs.
  • The pace is fast!
  • This position is classified as a safety-sensitive role in accordance with applicable state and federal laws. Candidates selected for this position will be subject to a comprehensive background check, which includes mandatory drug testing.

Why Clayco?
  • 2025 Best Places to Work - St. Louis Business Journal, Los Angeles Business Journal, and Phoenix Business Journal.
  • 2025 ENR Top 400 - Top Data Center Contractor (Top 3).
  • 2025 ENR Top 100 Design-Build Firms - Design-Build Contractor (Top 5).
  • 2025 ENR Top 100 Green Contractors - Green Contractor (Top 3).

Benefits
  • Discretionary Annual Bonus: Subject to company and individual performance.
  • Comprehensive Benefits Package Including: Medical, dental and vision plans, 401k, generous PTO and paid company holidays, employee assistance program, flexible spending accounts, life insurance, disability coverage, learning & development programs and more!

Compensation
  • The salary range for this position considers a wide range of factors in making compensation decisions including but not limited to: Education, qualifications, skills, training, experience, certifications, internal equity, and location. Compensation decisions are dependent on the facts and circumstances of each case.

What Clayco employees say

Pay

Hours and flexibility

Workplace

Get the full story on Breakroom

Apply