Lead Systems Specialist- Governance Risk and Compliance (GRC)

Summary AutoZone is looking for a professional who has a deep understanding of privacy, governance, and assessment of enterprise portfolio management, cybersecurity, regulatory, vendor management, security training, and data management. This person will be responsible for the execution, and delivery of ITGRC programs to mature the privacy, governance, risk and compliance practices at AutoZone and positively impact related information security risks. We need a passionate individual who can scale across roles and is flexible to work with a diverse team. This role will collaborate globally with internal stakeholders from every functional area to ensure engagements are addressing current and emerging threats, resulting in the protection of AutoZone’s sensitive data. This includes teaching domain expertise, providing technical guidance and mentoring, supporting the customers, resolving problems, and training as required. Responsibilities Identify security concerns and mitigating controls; identify, document, and manage risks to AutoZone data, systems, and processes. Accurate work planning and execution; accurate project and time tracking. Teaching, coaching, and technical mentoring security subject matter expertise to less senior security analysts and engineers. Work collaboratively with department and organizational leadership to define and manage Third Party Risk Management best practices Provide direction and oversight of enterprise security training workflows, assessment gaps, information security risks, and remediation recommendations Oversee and direct a variety of security risk assessments with AutoZone’s community, providing advisory support to the business partners on the evaluation of risks, development of remediation plans. Partner with external stakeholders to define and implement processes that result in the reduction of cyber risk Drive the enhancement and use of Governance, Risk, and Compliance technology-based tools to record risk levels, automate risk assessments, and facilitate risk monitoring Mentor team members on information security controls, standards and best practices related to applicable cybersecurity, privacy regulations, and third-party digital risk Assist internal auditors with special projects and oversee remediation completion and reporting Forge partnerships with internal stakeholders through the delivery of