Senior Information Security GRC Analyst
New
B
BranchFinTech
REMOTE within the United States of AmericaFull-TimeSenior
Salary155,000 - 165,000 USD per year
Apply NowOpens the employer's application page
Job Details
- Experience
- 5-7 years of experience in a similar role
Requirements
- 5-7 years of experience in a similar role.
- 3+ years of expertise conducting audits (SOC 2, PCI, or ISO 27001) and handling audit responses.
- Excellent communication skills (oral and written) for leadership and employees.
- Knowledge of GRC tool techniques and best practices (Drata, HyperProof, AuditBoard, OneTrust).
- Familiarity with security and compliance requirements (SOC 2, PCI, NIST CSF, ISO 27001, CCPA).
- Excellent organizational, process improvement, and project management skills.
- CISA, CISM or working toward certification.
Responsibilities
- Manage and maintain the Branch Information Security Program and security function processes.
- Perform control mapping to align internal controls with regulatory and compliance frameworks (SOC 2, ISO 27001, PCI, NIST CSF, CCPA).
- Conduct comprehensive gap analysis to identify deficiencies in existing controls.
- Manage risk and vulnerability assessments, validation testing, and audits.
- Manage Branch’s Drata GRC platform, including audit evidence collection and validation.
- Manage the end-to-end third-party vendor management lifecycle.
- Manage the security training and awareness program.
- Support the planning of penetration tests and coordination of remediation efforts.
View Full Description & ApplyYou'll be redirected to the employer's site
