Information Security GRC Analyst

Job Summary

A company is looking for an Info Sec GRC Analyst III to manage information security risks and ensure compliance with risk management policies.

Key Responsibilities

• Measure, monitor, and report on information security risks
• Review vendor/third party risk and support vendor risk management activities
• Engage staff and vendors to develop and monitor risk mitigation plans

Required Qualifications, Training, and Education

• Bachelor's Degree or equivalent years of relevant work experience required
• Minimum of seven (7) years of relevant work experience is required
• Certified in Risk and Information System Control (CRISC) or System Security Certified Practitioner (SSCP) preferred
• Working technical knowledge/experience in IT Audit, application, server, and network security
• Experience with Sarbanes-Oxley (SOX) compliance and security monitoring