IT GRC Analyst
Axcelis TechnologiesBeverly, Massachusetts, United States
Posted October 14, 2025
106804 - 160206 USD year
About the Company
Axcelis Technologies, Inc. is a world-leading provider of equipment and services to the semiconductor manufacturing industry. For over forty five years, chipmakers from around the globe have relied on Axcelis' tools and process expertise to form the transistors that power all electronics - from smartphones and laptops, cameras, personal music players and more. Our equipment portfolio comprises a powerful suite of manufacturing technologies for ion implantation, one of the most critical steps in the IC manufacturing process. In addition, we provide extensive aftermarket service and support, including spare parts, equipment upgrades, maintenance services, and customer training. Our customers include all of the 20 largest semiconductor manufacturers in the world. More than 3000 of our products are in use worldwide. At our Advanced Technology Center in Beverly, Mass., we collaborate with customers and other industry experts to develop next-generation applications and process capabilities. We support our customers with a worldwide network of 38 field offices in 10 countries. In all that we do, our strategy is singular: align every Axcelis innovation and success with our customers' goals. We strive to understand the entirety of their challenges and stand ready to deliver the technology, service and support they need to succeed.
Job Description
Axcelis Technologies is seeking an IT GRC Analyst to lead and support enterprise-wide cybersecurity, audit, and compliance initiatives. The ideal candidate is a proactive, detail-oriented professional with strong communication skills, a passion for cybersecurity, and a proven ability to manage complex compliance programs and risk assessments.
Requirements
- Act as the primary IT liaison for internal and external audits.
- Coordinate requests and meetings for information (PBC lists).
- Ensure accurate and timely responses to auditor inquiries.
- Write, design, document, and maintain IT General Controls (ITGC) and IT Application Controls (ITAC) aligned with NIST, CMMC, COBIT, ISO 27001, and SOX 404.
- Lead, perform, facilitate, and coordinate control self-assessments and internal risk reviews.
- Maintain and enhance the NIST Cybersecurity Framework and CMMC compliance posture.
- Guide Axcelis through its compliance journey toward NIST 2.0 and CMMC certification.
- Coordinate and support SOX testing with internal/external auditors, IT, and Finance teams.
- Provide IT audit and compliance support for operational, financial, and advisory engagements.
- Respond to customer security questionnaires and manage third-party risk assessments.
- Oversee vulnerability assessments, participate in penetration testing, and track remediation.
- Facilitate reporting and metrics for key areas of cybersecurity (vulnerability management, patch management, coverage, etc...)
- Act as a project manager for corrective action plans to drive resolution.
- Monitor and interpret changes in regulatory and compliance requirements.
- Develop and maintain security policies, standards, and procedures.
- Lead root-cause analysis and remediation planning for control deficiencies.
- Continuously improve audit methodologies, technologies, and best practices.
Benefits
- Eligibility in the Axcelis Team Incentive bonus plan
- Comprehensive benefits package (for regular employees working 20+ hours a week)
