Cybersecurity GRC Analyst II at Roper Technologies, Roper Tech - HQ

Cybersecurity GRC Analyst II at Roper Technologies in Roper Tech - HQ. Est. up to $160k. Apply with swipeandhired.

The role of a Cybersecurity GRC Analyst is essential to maintaining and elevating the security posture of an organization operating across a decentralized portfolio of 29 independently operated businesses. GRC Analysts are responsible for assessing risk, validating cyber controls, and driving compliance with the frameworks and regulatory environments that govern the organization. This document outlines the job expectations for a Cybersecurity GRC Analyst at the Level II, covering their role, responsibilities, and essential skills. At the Level II, the analyst is expected to operate with greater independence and ownership than at the entry level, taking assigned governance, risk, and compliance workstreams from start through to completion.

Core Values – Be Humble, Be a Solver, Keep it Simple, Own it, Core Responsibilities

Cyber Health Checks and Control Review

A Cybersecurity GRC Analyst is expected to assess the design and implementation of cyber controls across Roper's businesses during cyber health check visits. At the Level II, the analyst leads assigned portions of these reviews and exercises independent judgment on control efficacy. This role includes on-site visits to portfolio businesses, and travel can reach up to 30 percent depending on the assessment schedule, though it is not guaranteed and will vary throughout the year.

Risk and Compliance Assessment

Maintaining the organization's risk and compliance stance against various frameworks and regulatory environments is a central responsibility. The analyst helps ensure businesses of differing size and maturity are measured consistently against Roper standards.

Policy Management and Governance

Sound policy is the foundation of a strong governance program. The analyst owns the upkeep of cybersecurity policy and supports the consistent application of governance standards across the portfolio.

Acquisition (Bolt-On) Support

Roper is an active acquirer, and newly acquired businesses must be brought onto Roper cyber controls. The analyst supports this onboarding using the standard Roper methodology.

Career Path and Advancement

A Cybersecurity GRC Analyst can pursue various career paths within the cybersecurity field. Common trajectories include:

Continuous Learning

The cybersecurity landscape is constantly evolving, and Cybersecurity GRC Analysts must stay current with the latest frameworks, regulations, and practices. Roper assesses its businesses against a custom internal controls framework, so the ability to learn and apply that framework is central to the role. A working knowledge of established frameworks such as NIST, CSF, and ISO 27001 provides a strong foundation for that work.

Conclusion

Cybersecurity GRC Analysts play a pivotal role in safeguarding an organization's digital assets by assessing risk, validating controls, and driving compliance across the portfolio. Their responsibilities encompass cyber health checks, risk and compliance assessment, policy management, and acquisition support. Essential skills for this role include analytical ability, strong communication, attention to detail, and a commitment to continuous learning. As the regulatory and threat landscape continues to evolve, the role of the Cybersecurity GRC Analyst will remain indispensable in protecting the organization.