Senior Information Security Analyst - Governance, Risk & Compliance Services - Remote Opportunity

Job Expired

About the job

Detects, prevents and responds to complex information threats and security breaches. Implements and suggests improvements to technical security programs designed to protect the integrity of the organization’s networks, systems, applications and data. Maintains, communicates and suggests improvements to information security policies and coordinates complex or high-visibility company-wide information security controls. Drives security administration compliance. Leads information security audits and analysis and regularly drives solutions or provides other actionable deliverables. Suggests process improvements and leads documentation and process training. May supervise other analysts’ work.

As a Senior Information Security Analyst on the GRC Services Team you will be responsible for:

Big picture root cause identification
Escalation point for GRC Services team
Strategically design and implement product solutions to support GRC Services objectives, goals, strategies and measurements (OGSM) and Objective Based Roadmaps (OBR)
Present well reasoned position on prioritizing our product related work
Ability to identify, prioritize and represent risks across GRC Services and specific to compliance efforts to product teams and Information Security management.
Ability to coordinate and deliver complex engagements with third party providers as necessary
Ability to communicate with technical SME’s and product managers
Determine security policies related to GRC Services management
Drive cross-team GRC Services processes to support overall security objectives
Represent GRC Services program to audit and compliance assessors

Accountabilities

Proactively maintains information Security policies to protect the integrity of the organizations networks, systems, applications and data

Assigned to resolve non-routine security incidents and audits that may impact future developments
Proactively monitors, evaluates and maintains systems and procedures that safeguard internal information systems, network, databases, and Web-based security and makes recommendations to enhance systems
Recommends and implements changes to enhance systems security and prevent unauthorized access
Provides deliverables such as write-ups, diagrams and defects that help teams design and deploy secure solutions in concert with InfoSec services and technology
Develops education and communication security requirements and procedures to users and new employees
Monitors and researches new and emerging threats to preemptively eliminate the possibility of system breach
Stays current on information security industry developments through websites, podcasts, and other self-education
Executes software, hardware, network and service evaluations
Participates in security audits and security risk assessments
Assess and communicate security risks to the organization
Evaluates and implements measures to determine compliance with regulations and privacy laws