Senior Governance Risk & Compliance (GRC) Analyst will ensure the integrity, confidentiality and availability of the Firm s information via risk assessments, audits, controls testing, policy and procedure and compliance initiatives and operational duties. The successful candidate will support various GRC initiatives and work on a diverse set of security related tools and applications.
Essential Duties and Responsibilities:
- Perform information security risk assessments and assess the control environment of the business processes and applications under review, including both manual and automated processes in accordance with the information security program.
- Create, analyze and develop risk assessment/audit reports and remediation plans resulting from the identification of risks and vulnerabilities discovered during audits/risk assessments.
Knowledge, Skills, and Abilities Required:
- Strong knowledge of Information Security domains, concepts and principals.
- Strong knowledge of local and global Information Security, privacy and compliance regulations.
- Strong knowledge of Information Security frameworks such as ISO 27000, NIST, COSO and COBIT.
- Hands-on experience with security tools such as DLP, SIEM, NAC, A/V and EDR, etc.
- Excellent documentation skills.
- Detail-oriented and able to meet tight deadlines.
- Excellent written, verbal and interpersonal skills.
- Highly motivated self-starter with an inquisitive personality.
- Desire and ability to learn new skills and concepts.
Education and Experience:
- Bachelor s degree in related field or discipline.
- Minimum five years in Information Security environment.
- CISSP, CISA, GIAC and other Industry Certifications considered a plus.