Senior Analyst full_time NEW

The Senior Analyst in Information Security will be responsible for supporting the development, implementation, and maintenance of the organization’s governance, risk management, and compliance frameworks. This role will involve conducting risk assessments, ensuring adherence to security policies, and collaborating with various departments to promote a culture of compliance and security awareness. 

Key Responsibilities: 

• Governance Framework: Assist in the development and maintenance of the information security governance framework, including policies, procedures, and standards. 

• Risk Assessment: Conduct risk assessments to identify vulnerabilities and threats, and work with stakeholders to develop risk mitigation strategies. 

• Compliance Management: Monitor and evaluate the organization’s compliance with relevant regulations, standards, and best practices (e.g., GDPR, HIPAA, ISO 27001). 

• Policy Development: Support the creation and revision of information security policies and procedures, ensuring alignment with industry standards and organizational goals. 

• Audit Support: Assist with internal and external audits, providing necessary documentation and evidence to demonstrate compliance with security policies and regulatory requirements. 

• Training and Awareness: Develop and deliver training programs to enhance employee awareness of governance, risk, and compliance issues, and promote best practices in information security. 

• Reporting and Metrics: Prepare reports and presentations for management, highlighting risk assessment findings, compliance status, and recommendations for improvement. 

• Continuous Improvement: Stay informed about emerging threats, regulatory changes, and industry trends to continuously enhance the GRC framework. 

Qualifications: 

• Bachelor’s degree in Information Security, Risk Management, Business Administration, or a related field. 

• 5+ years of experience in information security, risk management, or compliance, with a focus on GRC frameworks. 

• Strong understanding of governance, risk management, and compliance principles and methodologies. 

• Familiarity with relevant regulations and standards (e.g., GDPR, HIPAA, PCI-DSS). 

• Excellent analytical skills and attention to detail, with the ability to assess complex security and compliance issues. 

• Strong communication and interpersonal skills, capable of collaborating effectively with cross-functional teams. 

• Proficiency in GRC tools and software is a plus. 

Preferred Qualifications: 

• Relevant certifications (e.g., CISSP, CISM, CRISC, CISA). 

• Experience with risk assessment methodologies and tools. 

 Additionally, you will enjoy some of our local benefits such as:

• Comprehensive medical, accidental, and life insurance
• Weekly wellness sessions to support your physical and mental well-being
• A generous paid time off policy