Wood Mackenzie is the global data and analytics business for the renewables, energy, and natural resources industries. Enhanced by technology. Enriched by human intelligence. In an ever-changing world, companies and governments need reliable and actionable insight to lead the transition to a sustainable future. That’s why we cover the entire supply chain with unparalleled breadth and depth, backed by over 50 years’ experience. Our team of over 2,400 experts, operating across 30 global locations, are enabling customers’ decisions through real-time analytics, consultancy, events and thought leadership. Together, we deliver the insight they need to separate risk from opportunity and make confident decisions when it matters most.<a href="https://www.woodmac.com/">WoodMac.com</a><a href="https://www.youtube.com/watch?v=Y4AVwhQJj_w&amp;t=10s">Wood Mackenzie Brand Video</a>Wood Mackenzie Values<ul><li>Inclusive – we succeed together</li><li>Trusting – we choose to trust each other</li><li>Customer committed – we put customers at the heart of our decisions</li><li>Future Focused – we accelerate change</li><li>Curious – we turn knowledge into action</li></ul>Job DescriptionThe role of the GRC Specialist is responsible for the day-to-day execution of governance, risk, and compliance (GRC) activities. This includes preparing for SOC and other audits, collecting and organizing evidence, responding to client/vendor security questionnaires, and maintaining the accuracy of the cyber risk register.The role works closely with IT, Security Engineering, and business stakeholders to ensure audit requests and client inquiries are addressed promptly and consistently. The Specialist ensures that risks, exceptions, and remediation actions are logged and tracked to completion, providing a strong operational foundation for the Risk &amp; Compliance program.Key ResponsibilitiesAudit &amp; Assurance Support:<ul><li>Collect and organize evidence for SOC2 and other internal audits.</li><li>Track remediation items from audits, ensuring timely closure with responsible teams.</li><li>Maintain a repository of reusable audit evidence to streamline future cycles.</li><li>Support the Risk &amp; Compliance Lead in responding to auditor and assessor queries.</li><li>Client &amp; Vendor Security Questionnaires.</li><li>Coordinate responses to customer and third-party security questionnaires.</li><li>Collaborate with technical owners (Engineering, IT, Product) to provide accurate answers.</li><li>Maintain a knowledge base of pre-approved responses to accelerate RFPs and renewals.</li><li>Ensure responses are consistent with SOC2 reports and company policy.</li></ul>Risk Register &amp; Exception Management:<ul><li>Update and maintain the cyber risk register in coordination with the Risk &amp; Compliance Lead.</li><li>Record new risks, assign owners, and track remediation/progress.</li><li>Document Policy Exception Risk Acceptance (PERA) approvals and expirations.</li><li>Ensure risk data is kept current for reporting cycles.</li></ul>Reporting &amp; Metrics:<ul><li>Contribute data for quarterly risk and compliance dashboards.</li><li>Provide metrics on questionnaire volumes, audit findings, and remediation timelines.</li><li>Highlight overdue risks, audit items, or exceptions to the Risk &amp; Compliance Lead.</li></ul>Experience &amp; Skills<ul><li>Experience in IT audit, compliance, or GRC operations.</li><li>Familiarity with audit frameworks (SOC2, ISO 27001, GDPR).</li><li>Strong organizational skills for evidence collection and tracking.</li><li>Ability to manage multiple concurrent requests and deadlines.</li><li>Clear written communication for client questionnaires and reports.</li><li>Experience in SaaS, data analytics, or regulated industries.</li><li>Exposure to vendor/supplier risk assessments.</li><li>Experience using GRC platforms (ServiceNow GRC, Archer, or equivalent).</li></ul>Equal OpportunitiesWe are an equal opportunities employer. This means we are committed to recruiting the best people regardless of their race, colour, religion, age, sex, national origin, disability or protected veteran status. You can find out more about your rights under the law at <a href="http://www.eeoc.gov/">www.eeoc.gov</a> If you are applying for a role and have a physical or mental disability, we will support you with your application or through the hiring process.

In the middle of the energy transition, businesses and governments are faced with significant challenges. But the pace and scale of change mean every decision is made&nbsp;under mounting pressure.&nbsp; Now, more than ever, companies need reliable data, analytics and actionable insight. Wood Mackenzie is the&nbsp;leading global provider of data and analytics solutions&nbsp;for the renewables, energy and natural resources sectors . Wood Mackenzie&rsquo;s services&nbsp;include data, analytics, insight, events and consultancy.&nbsp; A trusted partner for over 50 years, Wood Mackenzie&rsquo;s team has over 2,300 experts across more than 30 global&nbsp;locations who cover the entire supply chain. Wood Mackenzie&rsquo;s data and analytics empowers energy producers, governments and financial institutions to be confident in&nbsp;their investment decisions in the face of rapidly evolving markets. Part of the Veritas group.

GRC Specialist

Wood Mackenzie is the global data and analytics business for the renewables, energy, and natural resources industries. Enhanced by technology. Enriched by human intelligence. In an ever-changing world, companies and governments need reliable and actionable insight to lead the transition to a sustainable future. That’s why we cover the entire supply chain with unparalleled breadth and depth, backed by over 50 years’ experience. Our team of over 2,400 experts, operating across 30 global locations, are enabling customers’ decisions through real-time analytics, consultancy, events and thought leadership. Together, we deliver the insight they need to separate risk from opportunity and make confident decisions when it matters most.<a href="https://www.woodmac.com/">WoodMac.com</a><a href="https://www.youtube.com/watch?v=Y4AVwhQJj_w&amp;t=10s">Wood Mackenzie Brand Video</a>Wood Mackenzie Values<ul><li>Inclusive – we succeed together</li><li>Trusting – we choose to trust each other</li><li>Customer committed – we put customers at the heart of our decisions</li><li>Future Focused – we accelerate change</li><li>Curious – we turn knowledge into action</li></ul>Job DescriptionThe role of the GRC Specialist is responsible for the day-to-day execution of governance, risk, and compliance (GRC) activities. This includes preparing for SOC and other audits, collecting and organizing evidence, responding to client/vendor security questionnaires, and maintaining the accuracy of the cyber risk register.The role works closely with IT, Security Engineering, and business stakeholders to ensure audit requests and client inquiries are addressed promptly and consistently. The Specialist ensures that risks, exceptions, and remediation actions are logged and tracked to completion, providing a strong operational foundation for the Risk &amp; Compliance program.Key ResponsibilitiesAudit &amp; Assurance Support:<ul><li>Collect and organize evidence for SOC2 and other internal audits.</li><li>Track remediation items from audits, ensuring timely closure with responsible teams.</li><li>Maintain a repository of reusable audit evidence to streamline future cycles.</li><li>Support the Risk &amp; Compliance Lead in responding to auditor and assessor queries.</li><li>Client &amp; Vendor Security Questionnaires.</li><li>Coordinate responses to customer and third-party security questionnaires.</li><li>Collaborate with technical owners (Engineering, IT, Product) to provide accurate answers.</li><li>Maintain a knowledge base of pre-approved responses to accelerate RFPs and renewals.</li><li>Ensure responses are consistent with SOC2 reports and company policy.</li></ul>Risk Register &amp; Exception Management:<ul><li>Update and maintain the cyber risk register in coordination with the Risk &amp; Compliance Lead.</li><li>Record new risks, assign owners, and track remediation/progress.</li><li>Document Policy Exception Risk Acceptance (PERA) approvals and expirations.</li><li>Ensure risk data is kept current for reporting cycles.</li></ul>Reporting &amp; Metrics:<ul><li>Contribute data for quarterly risk and compliance dashboards.</li><li>Provide metrics on questionnaire volumes, audit findings, and remediation timelines.</li><li>Highlight overdue risks, audit items, or exceptions to the Risk &amp; Compliance Lead.</li></ul>Experience &amp; Skills<ul><li>Experience in IT audit, compliance, or GRC operations.</li><li>Familiarity with audit frameworks (SOC2, ISO 27001, GDPR).</li><li>Strong organizational skills for evidence collection and tracking.</li><li>Ability to manage multiple concurrent requests and deadlines.</li><li>Clear written communication for client questionnaires and reports.</li><li>Experience in SaaS, data analytics, or regulated industries.</li><li>Exposure to vendor/supplier risk assessments.</li><li>Experience using GRC platforms (ServiceNow GRC, Archer, or equivalent).</li></ul>Equal OpportunitiesWe are an equal opportunities employer. This means we are committed to recruiting the best people regardless of their race, colour, religion, age, sex, national origin, disability or protected veteran status. You can find out more about your rights under the law at <a href="http://www.eeoc.gov/">www.eeoc.gov</a>&nbsp;If you are applying for a role and have a physical or mental disability, we will support you with your application or through the hiring process.&nbsp;&nbsp;

GRC Specialist

About the Job

About the Company

Wood Mackenzie

Similar Jobs

Environmental Compliance Team Member

Environmental Compliance Team Member

Senior GRC Analyst

Senior GRC Analyst

Risk and Assurance Manager

Risk and Assurance Manager

Risk & Compliance Associate

Risk & Compliance Associate

Senior / Lead Cybersecurity GRC Analyst

Senior / Lead Cybersecurity GRC Analyst

Complaint Specialist (SQ)

Complaint Specialist (SQ)

Regulatory Data Analyst

Regulatory Data Analyst

Regulatory Operations Analyst

Regulatory Operations Analyst

Billing & Time Keeping Compliance Coordinator

Billing & Time Keeping Compliance Coordinator

Risk and Compliance Manager

Risk and Compliance Manager