IT Security Analyst – GRC

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee daily IT security governance, risk management, and compliance throughout the organization.

• Assist in conducting third-party risk management assessments and uphold the overall TPRM program.

• Implement security systems and programs to effectively manage vulnerabilities.

• Utilize industry frameworks to enhance governance and risk management within technology systems and processes.

• Aid in IT compliance and risk assessments, including PCI scans, evaluations, remediation efforts, and Right to Be Forgotten requests.

• Conduct internal risk assessments to ensure that Lifeway's practices are secure and adhere to PCI and other standards and regulations.

• Play a role in the development and maintenance of security policies, standards, and procedures.

• Work collaboratively with both internal and external departments on various projects.

• Travel 2–4 times annually, usually overnight, for team gatherings.

• Embody Lifeway’s mission and values, demonstrating a strong commitment to Kingdom work.

⛳️ Requirements

• A bachelor's degree in computer science, cybersecurity, information technology, or a related discipline is required.

• 3–5 years of experience in IT risk, audit, or compliance is necessary.

• 1–2 years of experience in conducting assessments and/or audits, including identifying and addressing security control gaps, abnormal behavior patterns, and attack techniques.

• Proficient understanding of risk assessment and IT auditing methodologies.

• Familiarity with security frameworks such as NIST-CSF, PCI-DSS, MITRE, and OWASP.

• General knowledge of security domains and cloud security concepts.

• Experience with vulnerability assessment tools is beneficial.

• Willingness to travel to the Middle Tennessee area 2–4 times each year for team gatherings.

• Active involvement in an evangelical Christian church is required.

• Security+ or CISSP certification is preferred.

• CISA or CISM certification is preferred.

• GIAC, CCSK, or CCSP certification is preferred.

🏝️ Benefits

• Access to equipment and resources for a productive and ergonomic workspace.

• Comprehensive healthcare benefits.

• Vacation and sick leave.

• Holiday pay.

• Care days for personal needs.

• 401(k) retirement plan.

• Maternity and parental leave options.

• Assistance with adoption processes.

• Time allocated for mission trips.

• Travel arrangements for key team gatherings for remote team members.

• Flexible working hours and autonomy.

• Full-time employees are eligible for extensive benefits plans.