Senior Analyst, GRC

At GameStop, we are committed to providing exceptional service and delivering the latest and greatest in gaming products to our customers. As a leading global retailer of video games, electronics, and gaming merchandise, we take pride in offering a wide range of products that cater to the needs and desires of gamers worldwide. Our mission is to create unforgettable experiences for our customers by constantly pushing the boundaries of what's possible. Whether you're a hardcore gamer or just starting out, we've got something for everyone. Join us in our mission to shape the future of gaming and bring the best gaming products to the world!

The Senior GRC Analyst develop and execute GameStop’s compliance, risk management, and governance programs. This role will support maintenance of GameStop policies, distribution of awareness and training materials, responses to privacy requests, management of first- and third-party risks, and the review and approval of exceptions. As part of the wider security program, the Senior GRC Analyst will support efforts such as incident management and oversight over other security functions.

This position sits onsite 5 days a week in Grapevine, TX.

What you'll do

• Execute tasks required for the GameStop’s global governance, risk, and compliance programs.
• Review compliance with regulatory requirements and security frameworks
• Review compliance with and approve exceptions to GameStop internal policies and standards
• Assess first- and third-party risk management and the internal risk register
• Executed privacy related operational tasks such as consumer requests
• Deliver internal communications and security training materials, including security and privacy awareness, phishing tests, developer training, and general security practices
   

What you'll bring

• At least 2 years of experience in an IT GRC, cyber security, or information technology related role or an advanced degree in cyber security
• A bachelor’s degree in cyber security, information technology, or other related field or 2 additional years of job-related experience in IT GRC, information security, or audit roles
• An ideal candidate will have awareness of at least one of the following disciplines:
  • Global and US privacy regulations (e.g. GDPR, PIPEDA, COPPA, CCPA and other state laws)
  • IT general controls
  • Internal audit processes
  • Incident response
  • Compliance requirements such as Sarbanes-Oxley or PCI-DSS
  • Security and privacy frameworks such as NIST CSF or the Nymity Privacy Framework
• Ability to communicate effectively with both technical and non-technical partners across the business
• Collaborate with other security team members to drive cross functional initiatives
• Model the behaviors expected of all GameStop leaders including, but not limited to, a drive for results, with a demonstrable bias for action; high levels of emotional intelligence, maturity, and professionalism; giving, receiving and responding to

Full-time store positions at GameStop are also eligible to participate in incentive programs, health benefits, paid time off, 401 (k), employee discount and a casual work environment. Positions at GameStop may also be eligible for a bonus and/or other incentives.