Analyst Information Security
Core
Manage and improve the company's information security and compliance program by administering GRC tools, automating compliance workflows, and supporting audits.
Role type
Information Security Analyst (GRC)
Builds
Automated compliance workflows, dashboards, and reports for control monitoring and evidence collection.
Domain
Information Security / Governance, Risk & Compliance
Required skills
GRC tool administration, compliance framework knowledge (ISO 27001, SOC 2, PCI DSS), automation/scripting, audit support, cross-functional collaboration
Preferred skills
AuditBoard (CrossComply) experience, SOX ITGC/SOC 1/2 knowledge, Power BI/Excel reporting, Python/PowerShell scripting, CISA/CISSP/CRISC certifications
Technologies
ServiceNow GRC, OneTrust, Jira, SIEM/SOAR, IAM platforms, AuditBoard, Power BI, Python, PowerShell
Responsibilities
Manage and maintain GRC/compliance tools for control monitoring and evidence collection; Automate compliance workflows and integrate with systems like IAM and ticketing; Support security controls aligned with ISO 27001, SOC 2, PCI DSS, and IT General Controls; Define and enforce standards for compliance evidence quality and retention; Troubleshoot tool issues and maintain documentation and SOPs; Work with IT, Security, and Audit teams to define controls and improve processes.
Seniority
Individual Contributor