Information Security Analyst I (Entry Level)

About the role

The GRC Information Security Analyst I supports the ITC GRC Director and the global GRC team at PHK. This entry‑level position rotates across Governance, Risk, Compliance, and Technical Recovery streams, handling intake, hygiene, tracking and evidence‑collection tasks while building a solid foundation in GRC practices.

Key responsibilities

• Execute day‑to‑day GRC activities such as intake processing, data hygiene, and evidence collection.
• Track issues, chase documentation, and follow up to closure under senior guidance.
• Support risk register updates, policy documentation, and control testing activities.
• Assist with technical recovery tasks, including DR/BCP concepts like RTO/RPO.
• Learn and apply basic frameworks (NIST CSF, ISO 27001) and ServiceNow GRC processes.

Required profile

• 0–1 years of experience in cybersecurity, IT audit, compliance, or related GRC fields.
• Self‑initiative, willingness to learn, and ability to follow established procedures.
• Basic awareness of risk registers, policies, controls, and ITGC concepts.
• Interest in all four GRC streams and flexibility to work where demand is highest.
• Bachelor’s degree in Information Security, Computer Science, Information Systems, Business, or related discipline (or equivalent experience).

Required skills

• Proficiency with Excel or Google Sheets.
• Familiarity with documentation and collaboration tools.
• Exposure to ServiceNow or a comparable GRC/ITSM platform (preferred).