Senior Information Security Assurance Analyst
Core
Lead security audits, assessments, and control reviews across a federated environment to validate security controls and drive remediation.
Role type
Senior Information Security Assurance Analyst (GRC)
Builds
Enterprise security control framework and continuous assurance workflows
Domain
Information Security / GRC / Compliance
Required skills
Security audit planning and execution, Control design and effectiveness evaluation, Risk-based assurance approach, Remediation recommendation development, Regulatory and contractual requirement translation, Stakeholder communication and influence
Preferred skills
ServiceNow GRC/AVR experience, Professional certifications (CISA, CRISC, CISSP, CISM, ISO 27001 Lead Auditor)
Technologies
ServiceNow, Jira, NIST CSF, CIS Controls, PCI DSS
Responsibilities
Lead label, studio, and enterprise security audits from scoping to closure; Evaluate control design, implementation, and operating effectiveness; Identify control deficiencies and assess business/security impact; Validate remediation and compensating controls; Serve as operational lead for internal, external, and regulatory audits; Maintain and improve the enterprise security control framework; Partner with engineering teams to automate evidence collection and control monitoring; Provide subject-matter guidance and mentoring to GRC team members.
Seniority
Senior, hands-on IC with mentorship responsibilities
