Enterprise Security Analyst II – GRC, Governance, Risk, and Compliance

Role Overview

• Proactively protects the integrity, confidentiality, and availability of information
• Assists with the development and implementation of Enterprise Security policies, standards, and guidelines
• Performs GRC activities and procedures and implements security best practices across the enterprise
• Creates, reviews, and implements corporate information security policies and procedures
• Conducts vendor risk assessments on new and current technology
• Recommends controls for reporting, analyzing, and reducing the impact of security incidents
• Prepares and presents risk reports to management and internal stakeholders
• Assists with security assessments and penetration tests for risk reporting and mitigation
• Ensures IT changes are assessed for impact on security aspects
• Provides mentoring for junior level analysts and interns

Requirements

• Bachelor’s degree in Computer Science, Information Security, or related field
• Typically requires 3+ years in IT audit, risk management or security compliance
• Prior experience with Governance, Risk, and Compliance (GRC) platforms
• Certifications related to cyber security preferred, such as Security+, CRISC or CISA
• Demonstrated knowledge of compliance standards and security frameworks (COBIT, NIST, HIPAA, ISO27001/2, OWASP, PCI)

Tech Stack

• Cyber Security

Benefits

• Health, Dental and Vision Insurance
• Generous 401(k) with company match
• Paid Time Off (PTO) with Paid Holidays
• Flexible/Hybrid Work Schedule
• Paid Volunteer Program