Information Security GRC Analyst

Job Summary

A company is looking for an Information Security GRC Analyst III, CISSP preferred.

Key Responsibilities

• Measure, monitor, and report on information security risks
• Review and report on vendor/third party risk to support vendor risk management activities
• Engage staff and/or vendors to develop and monitor information security risk mitigation plans

Required Qualifications, Training, and Education

• Bachelor's Degree or equivalent years of relevant work experience required
• Minimum of seven (7) years of relevant work experience is required
• Certified in Risk and Information System Control (CRISC) or System Security Certified Practitioner (SSCP) preferred
• Working technical knowledge/experience in IT Audit, application, server, and network security
• Experience with Sarbanes-Oxley (SOX) compliance and security monitoring