Cybersecurity Compliance Analyst

Job Summary

A company is looking for a Cybersecurity GRC - Compliance Analyst.

Key Responsibilities

• Perform gap analysis and recommend improvements for compliance with SOC 1 & 2, NIST 800-171, ISO 27001, ISO 27701, and ISO 42001
• Conduct internal and external audits, and contribute to policy revisions and maintenance of the Integrated Management System
• Collaborate with stakeholders and present metrics on compliance and risk posture to senior leadership

Qualifications / Experience

• Relevant degree in Data Science, Computer Science, or Engineering preferred
• 2 years of experience with SOC 1 & 2, NIST 800-171, ISO 27001, and ISO 27701
• ISO 27001 Certified Internal / Lead Auditor or equivalent experience
• 2 years of experience in a risk management or information security role in a large software company
• Hands-on experience with GRC tools and intermediate knowledge of cloud platforms like AWS, Azure, and GCP