Security Risk & Compliance Analyst
Core
Ensure security controls, policies, and procedures are implemented in accordance with laws, regulations, and industry standards for a device management platform.
Role type
Security Risk & Compliance Analyst
Builds
Security compliance program, risk assessments, vendor/customer security reviews
Domain
Cybersecurity, Governance, Risk, and Compliance (GRC)
Deliverable
dashboards & analysis
Required skills
Risk assessment, regulatory compliance, security policy maintenance, vendor risk management, contract security review, security awareness training support, management reporting
Preferred skills
Cybersecurity frameworks (NIST, ISO 27001, SOC2), GRC applications, cloud technology, security tools
Technologies
NIST, ISO 27001, ISO 27701, SOC2, StateRAMP, FedRAMP, AWS
Responsibilities
Conduct risk assessments, collaborate on cyber risk treatment plans, maintain security policies, monitor compliance, participate in external audits, support vendor risk management, review security terms in contracts, support customer assurance processes, support security awareness training, prepare periodic reporting for senior management
Seniority
Junior, hands-on IC