Governance, Risk & Compliance (GRC) Analyst

Brooks is a leading provider of automation solutions with over 40 years of experience in the semiconductor industry, offering precision robotics, integrated automation systems, and contamination control solutions that empower chip manufacturers worldwide. Our product portfolio includes a range of automation solutions, including robots, vacuum systems, and atmospheric robots for semiconductor manufacturing (www.brooks.com).
Are you looking for a place where you can be part of a transformation? Join us at Brooks Automation and be a part of a dynamic organization that is shaping the future of technology.
Governance, Risk & Compliance (GRC) Analyst
Job Description
Work Location: ONSITE - Johor Bahru (OR) Penang.
About the Role:
Brooks Automation is seeking a GRC Analyst to join our Information Security team and help drive our security governance, risk, compliance, and customer assurance programs.
Working directly with the CISO and teams across IT, Engineering, Legal, HR, Operations, and Quality, this role will support our ISO 27001 ISMS, cybersecurity risk program, customer and supplier security requirements, regulatory readiness, and security awareness initiatives.
This is not a checkbox compliance role. We are looking for someone who can take ownership, work across the business, and turn security and compliance requirements into practical processes and measurable improvements.
Key Responsibilities:
Support and maintain Brooks’ ISO 27001 ISMS and certification activities.
Coordinate internal, external, surveillance, and recertification audits.
Maintain security policies, standards, procedures, controls, and audit evidence.
Facilitate cybersecurity risk assessments and manage risk registers, treatment plans, and exceptions.
Track remediation, corrective actions, and control improvements.
Manage customer security questionnaires and due diligence requests.
Support supplier and third-party security assessments.
Support requirements related to ISO 27001, NIST CSF, NIST 800-171, GDPR, CRA, and customer security requirements.
Partner with Legal and business teams on security and contractual requirements.
Coordinate security awareness training and phishing simulation programs.
Support incident governance, lessons learned, and corrective actions.
Develop security metrics, dashboards, and management reporting.
Support Security Council activities and continuous improvement of the security program.
Required Qualifications:
3-7 years of experience in GRC, Information Security, IT/Internal Audit, Risk Management, or a related field.
Experience supporting security compliance programs, risk assessments, or audits.
Working knowledge of security controls, risk management, and governance practices.
Strong written, communication, and organizational skills.
Ability to work effectively across technical and business teams and manage multiple priorities.
Preferred Qualifications:
Experience with ISO 27001 certification or surveillance audits.
Familiarity with NIST CSF, NIST 800-171, GDPR, CRA, SOC, or SOX.
Experience with customer security assessments and third-party risk management.
Certifications such as Security+, ISO 27001 Internal/Lead Auditor, CRISC, CISA, or CISSP.
What Success Looks Like:
Become a key contributor to Brooks’ ISO 27001 and GRC programs.
Support successful audits and maintain ongoing audit readiness.
Improve customer and supplier security assessment processes.
Strengthen risk tracking, remediation, and governance reporting.
Help scale Brooks’ security and compliance program as the business grows.
Why This Role Exists:
Cybersecurity expectations from customers, regulators, and business stakeholders continue to increase. Brooks needs a GRC practitioner who can take ownership, keep initiatives moving, and translate security requirements into sustainable business processes.
This role is key to maintaining ISO 27001 certification, supporting customer trust, managing cybersecurity risk, and strengthening the security program as Brooks grows.
#LI-MV1
#LI-Onsite
Work Location & Flexibility
At Brooks, we aim to foster a collaborative and engaging environment while offering flexibility where possible. Work arrangements may include a mix of in-office and remote work, depending on the nature of the role and business needs. Specific expectations will be shared during the interview process.
Brooks is committed to fostering a diverse and inclusive workplace and proudly serves as an equal-opportunity employer. We welcome all qualified applicants regardless of race, color, religion, gender identity or expression, sexual orientation, national origin, genetics, disability, age, veteran status, or any other legally protected characteristics.
Diversity enhances our innovative capabilities and strengthens our ability to serve our customers and communities effectively. At Brooks Automation, we celebrate the unique experiences and perspectives each individual brings, believing they are essential to our collective success. Join us in building a workplace where every team member is valued and can thrive.
For applicants with disabilities requiring accommodations, don't hesitate to get in touch with talentattraction@brooks.com or call +1 (978) 262-2400 to discuss your needs.
Review EEO Law & EEO Statement.

Skills
Risk Management, Due Diligence

Experience
3-7 yrs