InfoSec GRC Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Evaluate, implement, oversee, and document security measures that support the information security strategy and compliance requirements for ExamWorks and its subsidiaries.

• Promote a robust security program, which includes comprehensive security analysis, detection of intrusions and vulnerabilities, establishing standards and testing protocols, conducting risk assessments, and developing awareness, education, policies, standards, and procedures.

• Coordinate HITRUST and SOC 2 audit activities, which involve collecting data/artifacts, remediating exceptions, and ongoing monitoring.

• Address client assessments and respond to Requests for Proposals (RFPs).

• Perform vendor risk assessments and conduct follow-up reassessments.

• Engage in cross-training with the IT Security team regarding the management and configuration of security tools and technical controls.

⛳️ Requirements

• Bachelor's Degree in Computer Science or a related discipline.

• Minimum of 5 years of experience in IT security, risk management, compliance, and auditing.

• In-depth knowledge and expertise in compliance and security frameworks such as SOX, PCI, SOC, NIST, ISO 27001, HITRUST, HIPAA, and HITECH.

• Proven experience in coordinating compliance audit processes and implementing IT security risk assessment programs.

• Capability to clearly articulate general IT security policies, processes, and technical controls.

• Ability to offer insights regarding the design, implementation, and remediation of control deficiencies.

• Exceptional written and verbal communication abilities.

🏝️ Benefits

• Medical insurance

• Vision insurance

• Dental insurance

• Paid time off

• 401k

• Optional work-from-home arrangements

• Regular Monday–Friday standard business hours schedule