Information Security Risk Analyst

Job Summary

Enhancing ITGCs and automating processes, the remote Senior Analyst, Information Security Risk and Compliance will build and mature the Governance, Risk, and Compliance program while ensuring compliance with various standards such as SOX, Fedramp, and PCI.

Key responsibilities

• Introduce innovative capabilities to enhance the GRC program and align risk strategies with business priorities
• Enhance internal processes and policies by incorporating automation to streamline compliance efforts
• Provide leadership in the application and improvement of access management and operational procedures for IT systems

Required qualifications

• Bachelor's degree in General Business, Information Systems, Engineering, Science, or a related field with a minimum of 5 years' relevant experience
• 8+ years of internal controls and risk management experience, including ITGC SOX and SOC 1/2/3
• Good knowledge of Sarbanes-Oxley, NIST 800-53, Fedramp, and ISO 27001
• Experience managing both internal and external auditors
• Familiarity with SAAS-based applications and understanding of CI/CD development processes