IT Security Analsyst, GRC focusing