Principal Security Analyst
Core
Execute security audits, manage compliance certifications, and deliver security awareness training programs to assess and mitigate organizational security risks.
Role type
Principal Security Analyst (GRC & Audit)
Builds
Audit reports, compliance status, security training content, and risk assessments for global security leadership and external auditors.
Domain
Information Security, Governance, Risk, and Compliance (GRC)
Deliverable
client delivery
Required skills
Security audit execution, compliance framework management, security awareness program design, risk assessment, evidence collection, remediation tracking, executive reporting, LMS management, root cause analysis
Preferred skills
AI security auditing, video content creation, security champion program management, global team collaboration
Technologies
ISO 27001/27701/27017/42001, SOC2, NIST CSF/800-53, CIS Controls, OWASP Top 10, CSA CCM, AWS, GCP, SIEM, vulnerability scanners, CASB
Responsibilities
Conduct technical security assessments of systems and infrastructure; Support ISO and SOC2 certification activities; Develop and execute annual security awareness campaigns and training materials; Prepare audit reports and executive summaries for stakeholders; Coordinate with external auditors and certification bodies; Manage Learning Management System (LMS) for training completion tracking.
Seniority
Principal, hands-on IC with strategic oversight
