Junior IT GRC Analyst

job summary:

This role is based at our offices in Tampa, FL. As an IT Governance Risk and Compliance Analyst, you will assess and oversee all technology-related compliance issues across the organization including regulatory, information security, data privacy, business continuity, disaster recovery, identity management, user access, and data integrity. This position is also responsible for supporting the VP, Infrastructure, Operations, & Security and CISO in the conducting of NIST CSF, IT, and third-party vendor audits. Develops, maintains, and executes security policies, procedures and standards and manages the risk management program throughout the corporate enterprise.

location: TAMPA, Florida

job type: Contract

salary: $33 - 35 per hour

work hours: 8am to 4pm

education: Bachelors



responsibilities:

• Manages Information Security Risk Management Program to ensure company compliance with NIST CSF, CCPA, GDPR and SOX requirements.

• Establish and install key controls on departmental communication equipment and property access. Manage processes for protecting classified, proprietary, and sensitive information.

• Create and maintain documentation as it relates to security policies, procedures, incidents, audits, designs/configurations, processes, and requirements.

• Complete security questionnaires and respond to inquiries from customers.

• Assist in audits and assessments ensuring the completion of appropriate documentation.

• Advises senior management by identifying critical security issues, recommending risk-reduction solutions.

• Evaluate incidents and determine course of action. Report and track all incidents and their resolution.

• Support team for security and compliance requirements.

• Support team for security incidents.

• Support team for vulnerability Management program.

• Third-party vendor assessments and compliance evidence collection

• Review vendor Data Process Agreements; including ad hoc vendor security requirement documents

• Assist in the development of Enterprise IT Policies and Procedures

• Assist in the development and reporting of key performance/risk indicators

• Management and reporting of internal security awareness programs, e.g., phishing campaigns

• Performs other tasks as assigned.

• Conducts job responsibilities in accordance with the standards set out in Masonite's Code of Conduct and Ethics, its policies and procedures, the Corporate Compliance Agreement, applicable federal and state laws, and applicable professional standards.

• To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed above are representative of the knowledge, skill, and/or ability required. Each essential function is required, although reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

qualifications:

• Experience level: Entry Level
• Education: Bachelors (required)

skills:

Virtualization

Equal Opportunity Employer: Race, Color, Religion, Sex, Sexual Orientation, Gender Identity, National Origin, Age, Genetic Information, Disability, Protected Veteran Status, or any other legally protected group status.

At Randstad Digital, we welcome people of all abilities and want to ensure that our hiring and interview process meets the needs of all applicants. If you require a reasonable accommodation to make your application or interview experience a great one, please contact

Pay offered to a successful candidate will be based on several factors including the candidate's education, work experience, work location, specific job duties, certifications, etc. In addition, Randstad Digital offers a comprehensive benefits package, including health, an incentive and recognition program, and 401K contribution (all benefits are based on eligibility).

Applications accepted on ongoing basis until filled.