As a GRC Analyst I, you will partner with internal and external teams to understand, interpret and analyze Governance, Risk, and Compliance domains to enable our business partners to understand, adopt and mature new policies, standards and procedures. Collaborating with our business partners, you will maintain the Risk Management Framework (RMF) and methodology by periodically reviewing the risk framework relative to emerging trends and threats, changes in the organizational landscape & risk management best practices, and adjust the framework and methodology, as necessary.
The Gig:
- Implement security program using industry standard frameworks that align to regulatory requirements and business objectives.
- Perform risk analysis for systems, processes, third-party tools/applications, and configurations.
- Improve security posture through process, policy, automation, and the continuous advancement of capabilities.
- Document business ownership and responsibilities of the controls using the company’s GRC tool.
- Schedule and perform regular assessments (internal and external) to test effectiveness of controls.
- Investigate (internal and external) information security risk and exceptions assessments.
- Develop and monitor security incident management program to ensure effectiveness.
- Assess incidents, vulnerability scans, patching status, secure baselines, and penetration test result.
- Document and reports control failures and gaps to stakeholders. Provides remediation guidance and prepares management reports to track remediation activities.
- Remain current on best practices and technological advancements and acts as the technical resource for security assessment and regulatory compliance.
What You Need to Make the Cut:
- Bachelor’s degree or equivalent work experience (Information Technology, Engineering, Cybersecurity, or a related technical field).
- CISM, CISA or CRISC certification(s) or equivalent preferred.
- Public cloud technical certifications preferred.
- ITIL foundations certification preferred.
- Experience testing or auditing technical controls.
- Creative problem solver and desire to learn.
- Strong oral and written communication skills.
- Experience working in an Agile environment preferred.
The pay range for this position is 53K to 67K per year (pay to be determined by the applicant’s education, experience, knowledge, skills, and abilities, as well as internal equity and alignment with market data).
This role is eligible to participate in the annual bonus incentive plan.