Cybersecurity GRC Analyst

View full description

Requirements:

• A minimum of 8+ years of relevant experience in security governance, risk, and compliance, preferably in a tech startup environment.
• A Bachelor’s degree in Computer Science, Information Security, or a related field.
• Deep knowledge of security best practices and industry standards, such as ISO 27001, SOC2, PCI, and GDPR/CCPA.
• Experience at a Big 4 firm or similar reputable audit firm.
• Experience in supporting complex third party audit projects in a cloud centric environment.
• Excellent written communication skills with the ability to document, communicate, and report security assessments and the effectiveness of cybersecurity controls.

Responsibilities:

• Reviewing and implementing secure configurations across various tools like Okta, Terraform, AWS, Lumos, Cloudflare, and Github.
• Developing security requirements for partner teams and driving progress towards the execution of those requirements.
• Preparing for and running external security audits.
• Shaping the strategic direction of the Security GRC team.