Governance, Risk and Compliance Analyst III

NOTE: Individual(s) must be legally authorized to work in the United States without the need for immigration support or sponsorship from Milliman now or in the future. POSITION SUMMARY: The Governance, Risk & Compliance Analyst (GRC Analyst III) is a senior level role within the Global Corporate Services Information Security team. This position supports Milliman Practices and the broader firm by managing GRC activities, internal security reviews, contract and questionnaire reviews, audit coordination, vendor risk management, security awareness reporting, automation, AI agent creation, and continuous compliance monitoring. The role validates compliance with the Milliman Information Security Policy, identifies risks and control gaps, provides consultative guidance to improve security posture, and develops dashboards, workflows, and automated reporting to streamline GRC operations. RESPONSIBILITIES: (in order of priority) - Contract, Questionnaire, and Document Review - Serve as a key point of contact for information security contract terms, IS questionnaires, RFPs/RFQs, MSAs, BAAs, addenda, and related inquiries. - Review legal agreements and client documentation to ensure consistency with the Milliman Information Security Policy and applicable privacy/security requirements. - Collaborate regularly with Legal, Compliance, Information Security, and business teams. - Track contract and inquiry status to ensure internal service-level agreements are met. - Maintain