Information Security GRC Analyst

Job Summary

A company is looking for an Information Security Governance, Risk & Compliance Analyst.

Key Responsibilities

• Perform ongoing internal and vendor risk assessments and ensure appropriate actions are taken
• Update and track KPIs from the Information Security risk register and assist in developing Corrective Action Plans
• Lead compliance reviews and spearhead internal and external audits related to security regulations

Required Qualifications

• 3+ years of experience in security and compliance roles
• Bachelor's degree in Information Security or Information Technology preferred, but not required
• Knowledge of regulatory frameworks and compliance standards such as NIST, HIPAA, and SOX
• Security certifications like CRISC or CISA are preferred but not mandatory
• Strong conceptual understanding of Information Security theories and practices