Information Security GRC Analyst

Job Summary

Managing day-to-day and long-term information security risks, the full-time remote Information Security GRC Analyst III will ensure compliance with risk management policies, measure and report on security risks, and engage with vendors to develop risk mitigation plans.

Key responsibilities

• Measure, monitor, and report on information security risks
• Review vendor/third-party risks to support vendor risk management activities
• Engage employees and vendors in developing and executing information security risk mitigation plans

Required qualifications

• Bachelor's Degree or equivalent years of relevant work experience
• Minimum of seven (7) years of relevant work experience
• Certified in Risk and Information System Control (CRISC) or System Security Certified Practitioner (SSCP) preferred
• CISSP preferred
• Working technical knowledge/experience in IT Audit, application, server, and network security