GRC Security Analyst

Job Summary

As a full-time remote GRC Security Analyst, the successful candidate will ensure compliance with security standards and regulations in the mortgage lending industry, conduct risk assessments, and manage internal and external audits while maintaining effective communication with stakeholders.

Key responsibilities

• Monitoring and enforcing compliance with security frameworks and industry regulations relevant to financial services
• Conducting comprehensive risk assessments to identify vulnerabilities and evaluate existing security controls
• Leading preparations for security audits and adapting strategies to address audit findings effectively

Required qualifications

• Minimum of 5 years of experience in GRC, security compliance, or risk management, or equivalent education and experience
• In-depth knowledge of security frameworks (NIST CSF, SOC 2, ISO 27001) and data privacy regulations (GLBA, GDPR, CCPA)
• Relevant industry certifications such as CISSP, CISM, or CISA
• Strong analytical skills with the ability to independently resolve complex security issues
• Familiarity with GRC technologies and risk assessment tools specific to the financial services sector