Senior Risk Management Analyst
Core
Provide security compliance support for production transaction processing environments, evaluate security control posture, and develop mitigation plans for risks and liabilities.
Role type
Senior IC information security compliance analyst
Builds
Compliance with PCI-DSS, ISO 27001, SOC 1 & SOC 2 standards for payment card services
Domain
Transportation technology / Payment card processing / Information security
Deliverable
dashboards & analysis
Required skills
Security risk assessment methodology, audit coordination, compliance gap identification, stakeholder management, remediation planning, contract review
Preferred skills
Cloud security (Azure/AWS), network security tools, encryption implementation, vulnerability assessment, SIEM/FIM solutions
Technologies
OneTrust GRC, Microsoft Office, PCI-DSS 4, ISO 27001-2022, SOC I/II
Responsibilities
Perform as Subject Matter Expert on Security Risk Assessment methodology; Facilitate security audit operations and coordinate with internal/external auditors; Lead design and control reviews to support continuous compliance; Manage security review processes for solutions to ensure compliance; Identify and report significant information security risks across infrastructure and third parties; Capture compliance gaps and remediation plans in the OneTrust GRC system.
Seniority
Senior, hands-on IC
