GRC Analyst I

Building Location:Peerless Building

Department:47530 Information Security

Job Description:Works under direct supervision and provides low-level oversight of secure enterprise network architecture with a focus on Governance, Risk, and Compliance (GRC). Responsibilities include:
Assisting in real-time analysis of the organization's security posture, including wireless, firewall, web application, and risk assessment.
Assisting in the research and recommendations of projects involving Information Security, with a particular emphasis on GRC initiatives.
Conducting and evaluating findings and recommendations from third-party risk assessments.
Presenting risks and assisting with the prioritization of vulnerability remediation strategies.
Assessing the status of regulatory compliance requirements, including, but not limited to PCI-DSS and HIPAA.
Experience:
• Applied experience or education with developing and leading security vulnerability management.
• Applied experience or education with network, system, and application access control concepts and integration.
• Applied experience or education with SIEM, vulnerability management systems configuration, and management.
• Experience or education with industry security frameworks, regulations, and standards, such as NIST, ISO 27001, GDPR, and SOX.

Education Qualifications:

Licensure/Certification Qualifications:

None

FTE:1

Possible Remote/Hybrid Option:

RemoteShift Rotation:Day Rotation (United States of America)

Shift Start Time:8:00

Shift End Time:4:30

Weekends:None

Holidays:No

Call Obligation:No

Union:Union Posting Deadline: