Information Security GRC Analyst

Job Summary

A company is looking for an Information Security Analyst, GRC.

Key Responsibilities

• Manage the alignment of internal policies and controls with HITRUST CSF and SOC2
• Collaborate with stakeholders to draft and update information security policies and standards
• Facilitate SOC2 and HITRUST assessments and audits, managing evidence gathering and documentation

Required Qualifications

• Verifiable experience in leading or participating in an Information Security GRC program
• 2+ years of experience in Information Security, IT Audit, or a Security GRC role
• Strong understanding of networking, operating systems, cloud security, and encryption
• In-depth knowledge of HITRUST CSF and SOC2, with familiarity in NIST and ISO 27001
• Experience with Jira, Google Workspace, and GRC platforms like Vanta or Drata