Skip to main content
CareerApp
Best Western

GRC Analyst - Hybrid AZ

Best Western

Remote-AZ · Remote · full time

Listed on Best Western’s own careers site. You apply with them directly — we never stand between you and the employer.

What this role is

This role supports governance, risk, and compliance across a global hospitality company, managing security policies, audit readiness, and regulatory compliance across frameworks like PCI DSS, SOX, and GDPR. It suits someone with compliance experience who can coordinate between business stakeholders and technology teams to maintain control environments and drive remediation efforts.

Our summary, not Best Western’s wording. The full posting is on their site.

What they ask for

Required

  • Support governance, risk, and compliance activities
  • Coordinate with internal stakeholders and external auditors on control documentation and evidence collection
  • Conduct control reviews and track remediation progress
  • Review audit findings and partner on remediation plans
  • Knowledge of PCI DSS v4.0.1, ASV requirements, and payment security standards
  • Understanding of GDPR, CCPA, and privacy obligations
  • Excellent documentation, communication, and organizational skills

Nice to have

  • Bachelor's or Master's degree in computer or information management field
  • CISSP, CISA, CISM, CRISC certification
  • 3–5 years' experience in information security compliance, audit, governance, or risk management
  • Experience with SOX-404 and IT General Controls
  • Intermediate to advanced Excel, PowerPoint, and reporting skills
  • Understanding of security metrics and compliance reporting
  • Ability to create security awareness or compliance training content

Turn on analytics and we load Google Analytics: Google gets the pages you open and what you do here — searches, jobs you view, jobs you apply to — and sets its own cookies. Leave it off and the only cookies we set are your login, your theme, and this answer. Accept All also records a yes to advertising, which nothing uses yet. Privacy Policy.