Governance, Risk and Compliance Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Ensure that the requirements for the compliance assurance program control are properly documented, and that processes are in place to validate the effectiveness of these controls.

• Work together with cross-functional teams to collect and validate compliance artifacts that meet both internal and external requirements and obligations.

• Engage in annual and ad-hoc risk assessments alongside internal stakeholders.

• Contribute to initiatives aimed at obtaining compliance attestations and certifications, such as ISO-27001, SOC 2, and PCI-DSS.

• Aid in identifying control deficiencies and monitor the progress of remediation efforts.

• Ensure that third-party vendors fulfill Aderant's security and compliance requirements by gathering and reviewing assessment questionnaires, artifacts, and attestation documents.

• Support additional governance activities including business continuity testing, data mapping, and disaster recovery exercises.

• Take part in the coordination and implementation of the security awareness training program, which includes creating security advisories and facilitating training activities and simulated phishing campaigns.

• Assist in the review and updating of security and compliance policies and procedures to ensure they accurately reflect business needs and align with industry-leading security practices.

• Help formulate information security metrics and dashboards that illustrate adherence to defined KPIs.

• Respond to customer questionnaires related to Aderant's security, compliance, and overall posture, collaborating with other teams as necessary.

⛳️ Requirements

• 2 to 5 years of pertinent experience in an Information Security or Governance, Risk, and Compliance (GRC) role.

• The capability to identify opportunities for risk reduction, detect and remediate vulnerabilities, and ensure compliance and audit readiness.

• Familiarity with regulatory frameworks and standards, including but not limited to ISO 27001, ISO 27701, ISO 42001, AIUC, PCI DSS, NIST CSF, CIS Top 20, GDPR, and/or CCPA.

• Basic technical knowledge of cloud service platforms such as AWS, Azure, etc.

• Proficient in Microsoft Office Suite, particularly Excel, PowerPoint, and Teams.

• Basic understanding and experience with AI tools like ChatGPT, Claude, MS Copilot, etc.

• Experience utilizing GRC automation platforms.

• Strong analytical abilities and the capacity to understand and document complex business process data flows.

• A high degree of professionalism, attention to detail, strong organizational skills, team orientation, dedication, resourcefulness, and a willingness to learn.

• Ability to manage multiple tasks and priorities while demonstrating effective time management and communication skills.

• Excellent communication skills, with the ability to convey basic security concepts to both technical and non-technical stakeholders.

🏝️ Benefits

• Health insurance

• Professional development opportunities