Sr. Governance, Risk, and Compliance (GRC) Analyst

TOP NON-NEGOTIABLE SKILLS

1. Develop and implement effective and reasonable policies, procedures and practices to secure protected and sensitive data and ensure security and compliance with relevant legislation and legal interpretation
2. Support the development and implementation of the system-wide risk management function of the information security program to ensure security risks are identified and monitored.
3. Conducts information security assessments of suppliers (third party vendors and cloud services)including advising management on how to mitigate any identified risks.
4. 6 - 9 years of experience working in information security, risk management and compliance. 6 9 years of experience with IT auditing and risk analysis.
5. Bachelor s degree in business, Information Management, Computer Science, Data Analytics or a related field is required
6. Understanding of common security standards and regulations (e.g., PCI DSS, SOX, SOC1, SOC2, IT ISO2700x, etc.)

WHAT WOULD MAKE THIS HIRE STAND OUT

1. CISA, CISM, CRISC, CISSP, PCIP or any combination preferred
2. IF they have PCI (Payment Card Industry) experience!!!