Information Security Sr Analyst

About the role

Join our team as an Information Security Sr Analyst in a hybrid setting, focusing on governance, risk, and compliance. This contract role involves ensuring compliance with regulations, managing cyber risks, and streamlining processes. Expertise in risk assessment methodologies and frameworks is essential.

Responsibilities

• Ensure compliance with contractual and regulatory requirements.
• Assess control design and operations against standards and frameworks.
• Assist with third-party and supply chain risk management.
• Promote a culture of risk awareness across the enterprise.
• Contribute to measuring success and identifying improvement opportunities.
• Drive efficiencies in function delivery and day-to-day tasks.
• Review client contract provisions related to data security and compliance certifications.
• Support independent certification and audit by collecting documentation and evidence.
• Monitor global regulatory and legal landscapes and maintain compliance awareness.
• Collaborate with IT groups to collect KPIs and KRIs and drive efficiency.
• Contribute expertise in third-party risk assessment processes.

Qualifications

• Bachelor's degree in information systems, Information Security, or related field.
• 7-10 years of experience in governance, risk, and compliance functions.
• Proficiency in risk assessment methodologies and frameworks.
• Familiarity with industry standards and frameworks such as NIST CSF, ISO 27001.
• Strong understanding of information security principles and concepts.

Core Technologies

• NIST CSF
• ISO 27001
• AICPA SOC