IT GRC Analyst

Who we are:

Globalstar pioneered personal safety by introducing its SPOT Satellite GPS Messenger in 2007.

Today, leveraging its low-earth orbit (LEO) satellite constellation, Globalstar reliably connects and protects assets, transmits key operational data, and saves lives – from any location – for consumers, industrial companies and government agencies in over 120 countries.

With a portfolio that includes SPOT GPS messengers, next-generation IoT products and modems, and cloud-based telematics solutions, Globalstar’s cost effective satellite-powered innovations give users visibility and intelligence for improving safety and operational efficiencies.

What we offer:


* Work/Life Balance:  Paid Time Off, Paid Holidays


* Financial Benefits:  401(k) Plan with Company Match, Employee Stock Purchase Program, Voluntary and Company Paid Group Life Insurance, Short- and Long-Term Disability Insurance, Medical FSA, Dependent Care, Competitive Salaries


* Health & Wellness:  Health Insurance, Dental Insurance, Vision Insurance, Employee Assistance Program, Comprehensive and Interactive Wellness Program

Job Summary: 

The IT GRC Analyst is responsible for supporting Globalstar's information security governance, risk, and compliance programs.

This role executes control oversight activities, maintains compliance with applicable regulatory frameworks, supports internal and external audit readiness, and assists with vendor risk management.

The IT GRC Analyst will leverage GRC tooling to automate and streamline compliance monitoring, produce highly accurate and consistent documentation, and serve as a knowledgeable resource across IT and business teams.

Additionally, this role provides project coordination support for IT implementations and installations, assisting in the organization, scheduling, and communication of project activities as needed.

Supervisory Responsibilities:


* None

Duties/Responsibilities:

Governance, Risk & Compliance


* Execute user access reviews, control evidence collection, and recurring risk reviews.


* Collect, review, and validate control evidence and supporting artifacts to assess completeness, accuracy, and alignment with defined requirements.


* Maintain and update the organization's risk register, documenting identified risks, current controls and recommended treatment options.


* Identify, document, and escalate control exceptions, discrepancies, and potential gaps to senior team members for evaluation and remediation.


* Monitor compliance with information security policies and assess potential risks associated with data handling and system changes.


* Support the maintenance of governance documentation and continuous improvement of department processes and procedures.

Audit & Regulatory Readiness


* Administer and support the organization's audit plan across SOC 2, ISO 27001, and SOX, ensuring controls are designed and operating effectively.


* Support internal a...