[Remote] Senior Analyst, Cyber GRC
Note: The job is a remote job and is open to candidates in USA. Ball Corporation is a company committed to integrity and sustainability. They are seeking a Senior Analyst in Cybersecurity Governance, Risk, and Compliance (GRC) who will be responsible for managing cybersecurity risks and compliance programs, ensuring effective governance practices, and supporting audits and documentation processes.
Responsibilities
- Support execution of the enterprise cybersecurity risk management program, including risk identification, assessment, documentation, and tracking
- Perform cybersecurity risk analyses and prioritize risk based on business impact, likelihood, and risk tolerance
- Support cybersecurity governance activities, including policy & standard creation, and security control lifecycle management
- Lead cybersecurity compliance activities, including control evidence collection, assessment support, and remediation tracking
- Partner with key stakeholders to lead internal and external cybersecurity audits by preparing documentation, responding to inquiries, developing remediation plans, and tracking findings
- Lead cyber supply-chain and third-party risk management activities, including assessments and follow-up actions
- Contribute to cybersecurity metrics, dashboards, and management reporting
- Document risk decisions, exceptions, and remediation actions to ensure transparency and audit readiness
- Partner with Cyber Defense Operations, Security Architecture & Engineering, IT, and OT Security to ensure risk and compliance requirements are understood and addressed
- Support regional business and technology teams in executing cybersecurity risk and compliance activities aligned to global standards
- Assist with region-specific regulatory and compliance requirements in coordination with the Director and other stakeholders
- Facilitate communication between regional teams and corporate cybersecurity functions regarding risk assessments, findings, and remediation activities
- Help ensure consistent application of cybersecurity governance processes across regions while supporting approved regional variations
Skills
- Bachelor's degree in Information Security, Computer Science, Risk Management, Business Administration, or a related discipline required
- Minimum of 5–8 years of experience in cybersecurity, technology risk, compliance, or related roles
- Strong analytical skills with the ability to assess and document cybersecurity risks clearly and accurately
- Attention to detail and disciplined approach to documentation and evidence management
- Ability to communicate effectively with technical and non‑technical stakeholders
- Strong organizational and coordination skills across multiple teams and activities
- Ability to manage competing priorities and meet deadlines
- Practical mindset that balances governance rigor with business realities
- Working knowledge of cybersecurity governance, risk, and compliance concepts and frameworks
- Understanding of how cybersecurity risk impacts business operations, manufacturing environments, and supply chains
- Familiarity with audit processes, control assessments, and remediation tracking
- Awareness of data protection and regulatory considerations affecting global organizations
- Understanding of how cybersecurity governance supports resilience, regulatory posture, and executive decision‑making
- Experience supporting risk assessments, audits, or compliance programs in a global or regulated environment preferred
- Relevant cybersecurity or risk certifications preferred
Benefits
- This role will be eligible to participate in the annual incentive compensation plan.
- Hybrid On-Site Work Environment: If based in Colorado, this position requires regular in-person engagement by working on-site for three (3) or more days per work week (with core collaboration days of Tuesday, Wednesday and Thursday).
Company Overview