Wood Mackenzie is the global leader in analytics, insights and proprietary data across the entire energy and natural resources landscape. For over 50 years our work has guided the decisions of the world’s most influential energy producers, utilities companies, financial institutions and governments. Now, with the world’s energy system more complex and interconnected than ever before, sector-specific views are no longer enough. That’s why we’ve redefined what’s possible with Intelligence Connected. By fusing our unparalleled proprietary data with the sharpest analytical minds, all supercharged by Synoptic AI, we deliver a clear, interconnected view of the entire value chain. Our trusted team of 2,700 experts across 30 countries breaks siloes and connects industries, markets and regions across the globe. This empowers our customers to identify risk sooner, spot opportunities faster and recalibrate strategy with confidence – whether planning days, weeks, months or decades ahead. Wood Mackenzie Intelligence Connected <a href="https://www.woodmac.com/">WoodMac.com</a><a href="https://www.youtube.com/watch?v=Y4AVwhQJj_w&amp;t=10s">Wood Mackenzie Brand Video</a>Wood Mackenzie Values<ul><li>Inclusive – we succeed together</li><li>Trusting – we choose to trust each other</li><li>Customer committed – we put customers at the heart of our decisions</li><li>Future Focused – we accelerate change</li><li>Curious – we turn knowledge into action</li></ul>Job DescriptionThe role of the GRC Specialist is responsible for the day-to-day execution of governance, risk, and compliance (GRC) activities. This includes preparing for SOC and other audits, collecting and organizing evidence, responding to client/vendor security questionnaires, and maintaining the accuracy of the cyber risk register.The role works closely with IT, Security Engineering, and business stakeholders to ensure audit requests and client inquiries are addressed promptly and consistently. The Specialist ensures that risks, exceptions, and remediation actions are logged and tracked to completion, providing a strong operational foundation for the Risk &amp; Compliance program.Key ResponsibilitiesAudit &amp; Assurance Support:<ul><li>Collect and organize evidence for SOC2 and other internal audits.</li><li>Track remediation items from audits, ensuring timely closure with responsible teams.</li><li>Maintain a repository of reusable audit evidence to streamline future cycles.</li><li>Support the Risk &amp; Compliance Lead in responding to auditor and assessor queries.</li><li>Client &amp; Vendor Security Questionnaires.</li><li>Coordinate responses to customer and third-party security questionnaires.</li><li>Collaborate with technical owners (Engineering, IT, Product) to provide accurate answers.</li><li>Maintain a knowledge base of pre-approved responses to accelerate RFPs and renewals.</li><li>Ensure responses are consistent with SOC2 reports and company policy.</li></ul>Risk Register &amp; Exception Management:<ul><li>Update and maintain the cyber risk register in coordination with the Risk &amp; Compliance Lead.</li><li>Record new risks, assign owners, and track remediation/progress.</li><li>Document Policy Exception Risk Acceptance (PERA) approvals and expirations.</li><li>Ensure risk data is kept current for reporting cycles.</li></ul>Reporting &amp; Metrics:<ul><li>Contribute data for quarterly risk and compliance dashboards.</li><li>Provide metrics on questionnaire volumes, audit findings, and remediation timelines.</li><li>Highlight overdue risks, audit items, or exceptions to the Risk &amp; Compliance Lead.</li></ul>Experience &amp; Skills<ul><li>Experience in IT audit, compliance, or GRC operations.</li><li>Familiarity with audit frameworks (SOC2, ISO 27001, GDPR).</li><li>Strong organizational skills for evidence collection and tracking.</li><li>Ability to manage multiple concurrent requests and deadlines.</li><li>Clear written communication for client questionnaires and reports.</li><li>Experience in SaaS, data analytics, or regulated industries.</li><li>Exposure to vendor/supplier risk assessments.</li><li>Experience using GRC platforms (ServiceNow GRC, Archer, or equivalent).</li></ul>Equal OpportunitiesWe are an equal opportunities employer. This means we are committed to recruiting the best people regardless of their race, colour, religion, age, sex, national origin, disability or protected veteran status. You can find out more about your rights under the law at <a href="http://www.eeoc.gov/">www.eeoc.gov</a> If you are applying for a role and have a physical or mental disability, we will support you with your application or through the hiring process.

In the middle of the energy transition, businesses and governments are faced with significant challenges. But the pace and scale of change mean every decision is made&nbsp;under mounting pressure.&nbsp; Now, more than ever, companies need reliable data, analytics and actionable insight. Wood Mackenzie is the&nbsp;leading global provider of data and analytics solutions&nbsp;for the renewables, energy and natural resources sectors . Wood Mackenzie&rsquo;s services&nbsp;include data, analytics, insight, events and consultancy.&nbsp; A trusted partner for over 50 years, Wood Mackenzie&rsquo;s team has over 2,300 experts across more than 30 global&nbsp;locations who cover the entire supply chain. Wood Mackenzie&rsquo;s data and analytics empowers energy producers, governments and financial institutions to be confident in&nbsp;their investment decisions in the face of rapidly evolving markets. Part of the Veritas group.

GRC Specialist

Wood Mackenzie is the global leader in analytics, insights and proprietary data across the entire energy and natural resources landscape. For over 50 years our work has guided the decisions of the world’s most influential energy producers, utilities companies, financial institutions and governments. Now, with the world’s energy system more complex and interconnected than ever before, sector-specific views are no longer enough. That’s why we’ve redefined what’s possible with Intelligence Connected. By fusing our unparalleled proprietary data with the sharpest analytical minds, all supercharged by Synoptic AI, we deliver a clear, interconnected view of the entire value chain. Our trusted team of 2,700 experts across 30 countries breaks siloes and connects industries, markets and regions across the globe. This empowers our customers to identify risk sooner, spot opportunities faster and recalibrate strategy with confidence – whether planning days, weeks, months or decades ahead. Wood Mackenzie Intelligence Connected <a href="https://www.woodmac.com/">WoodMac.com</a><a href="https://www.youtube.com/watch?v=Y4AVwhQJj_w&amp;t=10s">Wood Mackenzie Brand Video</a>Wood Mackenzie Values<ul><li>Inclusive – we succeed together</li><li>Trusting – we choose to trust each other</li><li>Customer committed – we put customers at the heart of our decisions</li><li>Future Focused – we accelerate change</li><li>Curious – we turn knowledge into action</li></ul>Job DescriptionThe role of the GRC Specialist is responsible for the day-to-day execution of governance, risk, and compliance (GRC) activities. This includes preparing for SOC and other audits, collecting and organizing evidence, responding to client/vendor security questionnaires, and maintaining the accuracy of the cyber risk register.The role works closely with IT, Security Engineering, and business stakeholders to ensure audit requests and client inquiries are addressed promptly and consistently. The Specialist ensures that risks, exceptions, and remediation actions are logged and tracked to completion, providing a strong operational foundation for the Risk &amp; Compliance program.Key ResponsibilitiesAudit &amp; Assurance Support:<ul><li>Collect and organize evidence for SOC2 and other internal audits.</li><li>Track remediation items from audits, ensuring timely closure with responsible teams.</li><li>Maintain a repository of reusable audit evidence to streamline future cycles.</li><li>Support the Risk &amp; Compliance Lead in responding to auditor and assessor queries.</li><li>Client &amp; Vendor Security Questionnaires.</li><li>Coordinate responses to customer and third-party security questionnaires.</li><li>Collaborate with technical owners (Engineering, IT, Product) to provide accurate answers.</li><li>Maintain a knowledge base of pre-approved responses to accelerate RFPs and renewals.</li><li>Ensure responses are consistent with SOC2 reports and company policy.</li></ul>Risk Register &amp; Exception Management:<ul><li>Update and maintain the cyber risk register in coordination with the Risk &amp; Compliance Lead.</li><li>Record new risks, assign owners, and track remediation/progress.</li><li>Document Policy Exception Risk Acceptance (PERA) approvals and expirations.</li><li>Ensure risk data is kept current for reporting cycles.</li></ul>Reporting &amp; Metrics:<ul><li>Contribute data for quarterly risk and compliance dashboards.</li><li>Provide metrics on questionnaire volumes, audit findings, and remediation timelines.</li><li>Highlight overdue risks, audit items, or exceptions to the Risk &amp; Compliance Lead.</li></ul>Experience &amp; Skills<ul><li>Experience in IT audit, compliance, or GRC operations.</li><li>Familiarity with audit frameworks (SOC2, ISO 27001, GDPR).</li><li>Strong organizational skills for evidence collection and tracking.</li><li>Ability to manage multiple concurrent requests and deadlines.</li><li>Clear written communication for client questionnaires and reports.</li><li>Experience in SaaS, data analytics, or regulated industries.</li><li>Exposure to vendor/supplier risk assessments.</li><li>Experience using GRC platforms (ServiceNow GRC, Archer, or equivalent).</li></ul>Equal OpportunitiesWe are an equal opportunities employer. This means we are committed to recruiting the best people regardless of their race, colour, religion, age, sex, national origin, disability or protected veteran status. You can find out more about your rights under the law at <a href="http://www.eeoc.gov/">www.eeoc.gov</a> If you are applying for a role and have a physical or mental disability, we will support you with your application or through the hiring process.

GRC Specialist

About the Job

About the Company

Wood Mackenzie

Similar Jobs

Senior GRC Analyst

Senior GRC Analyst

Data Protection & Governance Specialist

Data Protection & Governance Specialist

Information Security Analyst

Information Security Analyst

Senior GRC Analyst

Senior GRC Analyst

Compliance and Procurement Specialist (m/f/x)

Compliance and Procurement Specialist (m/f/x)

Policy & Compliance Analyst

Policy & Compliance Analyst

Compliance Analyst

Compliance Analyst

GRC Analyst

GRC Analyst

JP Risk Management Specialist

JP Risk Management Specialist

Staff GRC Risk Specialist

Staff GRC Risk Specialist