The GRC Analyst collects audit evidence, coordinates audits, tests controls, tracks findings, conducts access and inventory reviews, assesses vendor risk, responds to customer security questionnaires and RFPs, and administers policy lifecycles. The role also maintains questionnaire answer libraries and improves AI-assisted compliance workflows while partnering with control owners to resolve gaps and support customer trust.