Support implementation and maintenance of GRC frameworks, manage risk remediation and GRC tickets, gather and document IAM requirements, develop and maintain security policies, provide guidance and training to stakeholders, and stay current on access security and compliance requirements.
The Team
The Analyst Governance, Risk, and Compliance, a member of the Information Security – Governance, Risk and Compliance (GRC) team, focuses on implementing and maintaining governance frameworks, managing risk remediation activities, and ensuring adherence to regulatory and internal security standards. The incumbent oversees requirements gathering and documentation for the Identity and Access Management (IAM) implementation. The incumbent administers GRC related inquiries from cross-functional business teams. The incumbent assists in the oversight and maintenance of policy and standards.
ResponsibilitiesWhat You Can Offer Us
- Act as a liaison between IT and business units to support the development and implementation of governance policies, standards, frameworks, and tools that align with organizational objectives.
- Supports requirements gathering and documentation for InfoSec projects and programs, including proactively setting up and leading meetings to work through unclear requirements, workflows, and drive toward identification of solutions.
- Manages GRC ticket maintenance and provides guidance to stakeholders on GRC topics.
- Monitor and maintain risk remediation activities, ensuring compliance issues are addressed, risks are documented, and exceptions are tracked in accordance with established frameworks and standards.
- Provide guidance and training to stakeholders on governance, risk, and compliance topics to enhance awareness and improve adherence to processes.
- Engage constructively with business partners to address information security governance and compliance concerns, offering actionable recommendations for improvement.
- Assist with the development of security architecture and security policies, principles and standards
- Proactively research and stay up to date on the latest access security issues
- Other duties as assigned.
What You Need to Succeed
- Bachelor’s degree in Information Security, Cybersecurity, Risk Management, or equivalent work experience preferred.
- Minimum 2 years of experience in Governance, Risk, and Compliance (GRC) or Information Security required.
- Experience conducting requirements gathering sessions and documentation, including data analysis preferred.
- Experience developing, documenting and maintaining access and security policies, processes, procedures, and standards preferred.
- Strong organization, planning, and project management skills; ability to prioritize tasks for self and team to meet requirements and deadlines.
- Ability to work with different functional groups and levels of employees to effectively and professionally achieve results.
- Excellent written and verbal communication skills and ability to interact well with internal and external parties
- Ability to work individually and in team settings with cross-functional teams
- Strong computer skills, including Microsoft Office suite and Oracle.
- Knowledge of access, security, and risk assessment methods and technologies
- Knowledge of Information Security Standards (ISO 27001/27002, ITIL, etc.)
- Knowledge of Data Privacy and Compliance Regulations (MA CMR 201, HIPPA, Red Flag, etc.)
American Tower is a global digital infrastructure company serving customers through tower sites and other real estate solutions that support connectivity and opportunity, focused on achieving our vision of Building a More Connected World. Our success is rooted in the potential of our people and the power of local teams at our offices and sites across 25 countries.
We are one of the largest global Real Estate Investment Trusts (REITs) and a publicly traded (NYSE:AMT), Fortune 500 Company headquartered in Boston, Massachusetts. The next decade will be an exciting time as we evolve our infrastructure to meet tomorrow’s needs and position our people to elevate their impact, their potential, and our shared success. Come grow your career with us!
For more information about how American Tower is building a more connected world, visit americantower.com
American Tower is proud to be an equal opportunity employer and will not discriminate against an applicant or employee based on age, sex, sexual orientation, gender identity, race, color, creed, religion, national origin or ancestry, citizenship, marital status, familial status, disability, military or veteran status, genetic information, pregnancy, reproductive decisions, or any other characteristic protected under applicable law.
We are one of the largest global Real Estate Investment Trusts (REITs) and a publicly traded (NYSE:AMT), Fortune 500 Company headquartered in Boston, Massachusetts. The next decade will be an exciting time as we evolve our infrastructure to meet tomorrow’s needs and position our people to elevate their impact, their potential, and our shared success. Come grow your career with us!
For more information about how American Tower is building a more connected world, visit americantower.com
American Tower is proud to be an equal opportunity employer and will not discriminate against an applicant or employee based on age, sex, sexual orientation, gender identity, race, color, creed, religion, national origin or ancestry, citizenship, marital status, familial status, disability, military or veteran status, genetic information, pregnancy, reproductive decisions, or any other characteristic protected under applicable law.
American Tower is committed to fair and equitable compensation practices. Placement within the salary range is based on a variety of factors, including relevant experience, skills, certifications, job level, and location. For U.S.-based candidates only, please see the base salary range for this position listed below. This position is also eligible for annual bonus, and annual equity award and participation in the Employee Stock Purchase Plan (ESPP). For candidates outside of the U.S., salary and benefits are based upon local market practice.
American Tower also offers a comprehensive benefits package, which includes healthcare coverage, a 401(k) savings plan, paid time off, company holidays, sick leave, parental leave, and access to an Employee Assistance Program focused on mental and financial wellness, please click here to learn more.
American Tower Boston, Massachusetts, USA Office
116 Huntington Avenue, Boston, MA, United States, 02116
American Tower Woburn, Massachusetts, USA Office
10 Presidential Way, Woburn, United States, 01801
Similar Jobs
Artificial Intelligence • Cloud • Software
Manage and maintain compliance with security and privacy frameworks (ISO 27001, SOC 2, HIPAA, PCI DSS). Coordinate audits, drive remediation, improve controls and evidence management, support security questionnaires for deal cycles, and design compliance training while partnering across teams to integrate controls into the SDLC.
Top Skills:
AWSAzureDatadogDrataFrontend DevelopmentHipaaIso 27001LinearOpen Source ComponentsPci DssSdlcSoc 2
Events • Analytics • Consulting
Conduct research and deliver strategic advice on risk management and cyber risk quantification. Develop and maintain risk artifacts (standards, procedures, appetite, registry), produce 6–8 research projects yearly, consult with clients, collaborate across Forrester teams, advise vendors, publish insights, and present externally. Support C-suite and risk leaders and travel up to 20%.
Top Skills:
Grc Platforms
.png)
Information Technology • Mobile • Social Impact • Software
Develop and improve Dimagi’s CommCare platform through full-stack software engineering. Responsibilities include building features, writing automated tests, participating in code reviews and agile processes, supporting continuous integration and deployments, and collaborating with international development and implementation teams. The role focuses on creating accessible software for frontline workers in challenging environments and may include data engineering and AI-assisted coding work.
Top Skills:
Alpine.JsBootstrapClaude CodeCommcareCSSDjangoElasticsearchHTMLHtmxJavaScriptPostgresPython
What you need to know about the Boston Tech Scene
Boston is a powerhouse for technology innovation thanks to world-class research universities like MIT and Harvard and a robust pipeline of venture capital investment. Host to the first telephone call and one of the first general-purpose computers ever put into use, Boston is now a hub for biotechnology, robotics and artificial intelligence — though it’s also home to several B2B software giants. So it’s no surprise that the city consistently ranks among the greatest startup ecosystems in the world.
Key Facts About Boston Tech
- Number of Tech Workers: 269,000; 9.4% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Thermo Fisher Scientific, Toast, Klaviyo, HubSpot, DraftKings
- Key Industries: Artificial intelligence, biotechnology, robotics, software, aerospace
- Funding Landscape: $15.7 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Summit Partners, Volition Capital, Bain Capital Ventures, MassVentures, Highland Capital Partners
- Research Centers and Universities: MIT, Harvard University, Boston College, Tufts University, Boston University, Northeastern University, Smithsonian Astrophysical Observatory, National Bureau of Economic Research, Broad Institute, Lowell Center for Space Science & Technology, National Emerging Infectious Diseases Laboratories
