Information Security GRC Analyst IV

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee daily, short-term, and long-term information security risk and compliance initiatives.

• Ensure that all activities align with risk tolerance and adhere to established policies, procedures, and standards.

• Collaborate with stakeholders and clients on processes and controls related to information security risk and compliance.

• Measure, monitor, communicate, and report on cybersecurity risks, security metrics, risk mitigation strategies, and both strategic and tactical execution plans.

• Evaluate and report exceptions to policies, procedures, and standards to management.

• Engage with staff and vendors to formulate information security risk mitigation strategies.

• Design, review, enhance, and manage internal IT controls that safeguard the confidentiality, integrity, and availability of information assets.

• Maintain control evidence and present records to both internal and external auditors and regulators.

• Act as the primary point of contact for internal and external IT audits and assessments.

• Develop security strategy, goals, and objectives in collaboration with department leadership.

• Facilitate analysis, design, documentation, and validation of technical requirements for strategic projects.

• Serve as a subject matter expert in functional domains.

• Enhance employee knowledge and skills in relevant areas of expertise.

• Oversee and guide project enhancements or initiatives.

• Deliver engaging, informative, and well-structured presentations.

• Implement and communicate change management processes.

• Perform additional duties as assigned.

⛳️ Requirements

• A Bachelor's degree is mandatory.

• Equivalent years of relevant work experience may be accepted as a substitute for the required education.

• A minimum of ten (10) years of experience in IT, IT Risk, or Security is required.

• A minimum of five (5) years of experience in Security Risk or Program Management is preferred.

• Ability to prioritize and execute tasks independently, as well as in a collaborative, team-oriented environment.

• Excellent written and verbal communication, listening, critical thinking, presentation, and facilitation abilities.

• Strong organizational capabilities.

• Proficiency in establishing effective working relationships with stakeholders at all levels.

• Ability to manage multiple projects with a sense of urgency.

• Strong problem-solving skills with meticulous attention to detail.

• Working knowledge and experience in IT Audit/Compliance/Risk, Security Management, and Project/Program Management.

• Preferred certifications in Information Security, such as CISSP, CRISC, SSCP, CISA, or CISM.

• Project Management Professional (PMP) certification is preferred.

• Capability to work in a standard office environment and to sit or stand for extended periods.

🏝️ Benefits

• Bonus opportunities linked to both company and individual performance may be available.

• A robust and comprehensive total rewards package.

• Flexible remote work arrangements.