Junior Governance, Risk & Compliance Analyst

This is a fully remote position, open to applicants in Alaska, +4 more states.

📋 Description

• Assist in the governance, risk management, compliance, client assurance, and third-party risk management initiatives of the Security Office.

• Facilitate client security audits and evaluations.

• Collect, organize, and manage audit evidence packages.

• Coordinate the collection of supporting documentation from various business units.

• Prepare responses to customer security questionnaires utilizing approved evidence repositories.

• Monitor audit deliverables, timelines, and outstanding requests.

• Maintain documentation and records related to client audits.

• Analyze client Outside Counsel Guidelines concerning cybersecurity, privacy, AI governance, incident response, and compliance obligations.

• Record security requirements and contractual commitments.

• Monitor security requirements and remediation actions derived from OCG.

• Aid in implementing Security Office recommendations and exception documentation.

• Oversee OCG tracking databases and reporting materials.

• Assist in vendor cybersecurity evaluations and due diligence efforts.

• Review vendor security questionnaires, SIG responses, SOC reports, certifications, attestations, and supporting documentation.

• Document security findings, risks, suggestions, and compensating controls.

• Track vendor remediation efforts and review cycles.

• Maintain records and documentation libraries for vendor assessments.

• Support periodic vendor reassessments and monitoring initiatives.

• Contribute to ISO 27001, internal audits, client audits, and regulatory preparedness activities.

• Aid in document control and evidence management.

• Ensure security policies, standards, procedures, and records are up-to-date.

• Engage in audit preparation exercises and gap analysis.

• Monitor corrective actions and audit findings.

• Maintain governance documentation repositories.

• Assist in the review of security policies.

• Oversee compliance tracking programs.

• Support the development and reporting of security metrics.

• Assist in risk register and remediation tracking efforts.

• Contribute to initiatives aimed at process enhancement and automation.

• Update SOPs, standards, procedures, and knowledge base materials.

• Manage records related to audits, OCG, and vendor reviews.

• Collaborate with Procurement, Information Governance, Legal, and Security Operations teams.

⛳️ Requirements

• A minimum of 2 years of experience in cybersecurity, compliance, audit, risk management, legal operations, governance, or related areas.

• Bachelor's Degree in Cybersecurity, Information Systems, Business Administration, Risk Management, Legal Studies, or a related field is preferred.

• An equivalent combination of education and experience may be taken into account.

• Excellent written communication and documentation abilities.

• Proficiency in Microsoft 365 applications.

• Capability to handle sensitive and confidential information.

• Strong organizational and analytical skills.

• Ability to juggle multiple ongoing projects and meet deadlines.

• Familiarity with cybersecurity governance or compliance activities.

• Knowledge of prevalent security frameworks, such as ISO 27001, NIST CSF, and SOC 2.

• Experience in reviewing contracts, questionnaires, audit requests, or vendor documentation.

• Acquainted with professional services, legal, or regulated environments.

• Experience with AI-assisted research and document analysis tools.

🏝️ Benefits

• A selection of health and vision insurance plans.

• 2 paid volunteer days for eligible community service activities.

• Dental insurance plan.

• Fertility and adoption assistance.

• Paid sabbatical after 13 years of employment.

• Tuition reimbursement program.

• Commuter benefits available.

• Retirement contribution plans.

• Bonus eligibility for full-time staff.

• Optional Health Savings Account (HSA).

• Long-term disability coverage.

• Telemedicine and virtual short-term solution-based counseling services.

• Life insurance coverage.

• Flexible Spending Accounts for Healthcare and Dependent Care.

• Subsidized backup care and caregiving resources.

• 401(k) plan.

• Paid vacation time.

• Sick leave.

• 11 paid holidays annually.

• Employee assistance program.

• Voluntary accident insurance.

• Voluntary life insurance.

• Voluntary disability insurance.

• Voluntary long-term care insurance.

• Pet insurance options.

• Commuter and Transit programs.

• Opportunities for professional growth.

• Engagement opportunities within the community.

• A welcoming and authentic workplace culture.