Junior GRC (Governance, Risk, and Compliance) Analyst

About the role

Neuberger is seeking a Taiwan-based Junior GRC (Governance, Risk, and Compliance) Analyst for its Global Technology organization. The role develops and leads efforts to maintain and improve the security posture of the Taiwan environment, interfaces with local regulatory bodies as required and supports broader APAC compliance. It is a highly visible, client-facing position with regular interaction across business lines, including senior and executive leadership, and requires maintaining segregation of duties between Information Security, Internal Audit and operational IT.

Key responsibilities

• Develop, implement and maintain GRC and information security policies and procedures aligned with business goals and legal requirements.
• Conduct risk assessments and monitor compliance with internal policies and external regulations, reporting findings.
• Serve as a trusted advisor to business and IT teams on information security and regulatory compliance for Taiwan.
• Plan and run official filing and closing drills, and lead cybersecurity incident reporting drills, including scenario development, walkthroughs, execution and post-drill reporting.
• Track and ensure completion of the annual 15-hour IT security training for Taiwan office employees, and co-sign the Annual Statement on Internal Control.
• Maintain drill records, evidence and submission materials, and support SITCA surveys such as AI risk assessments.
• Support the risk management framework and stay current with emerging security and regulatory trends.

Required profile

• Bachelor's degree in Information Technology, Business Administration, Risk Management or a related field.
• 3+ years of related IT experience, preferably in financial services; candidates from other industries will also be considered.
• Familiarity with Taiwan financial services regulation (FSC and SITCA information security obligations); working knowledge of the PDPA and APAC financial sector standards is a plus.
• Experience in GRC, information security or a related function, and practical SecOps experience.
• Strong verbal and written communication, executive presence and teamwork skills; detail-oriented and organized.
• Right to work in Taiwan without the need for sponsorship.

Required skills

• Basic understanding of GRC concepts and frameworks, including risk assessment and control monitoring.
• Project management and business analyst skills.
• Proficiency in Microsoft Office (Word, Excel, PowerPoint).
• English business and technical writing; functional Cantonese and/or Mandarin.
• Preferred: GRC tools and software familiarity, and experience delivering technical/security training.