Information Security Sr Anlyst

Our focused technology areas:

• Data & Analytics (Data Architecture, Data Engineering, Data Migration, Data Modernization, Big Data, Analytics and BI)
• Cloud (Cloud Computing, Cloud Migration, Cloud-Native Architecture, Hybrid and Multi-Cloud)
• Quality Engineering (Manual Testing, Non-functional testing, Test Automation, Digital Testing)

• Manufacturing, Transportation, & Logistics
• Energy & Utilities
• Telecom & Media
• Government & Public Sector (FED, SLED, & Partners)
• Hi-Tech

Object Technology Solutions, Inc (OTSI) has an immediate opening for a Sr. Information Security Analyst - GRC

Sr. Information Security Analyst – GRC (Cary, NC
- Onsite)

Other

Location:

Overland Park, KS - Onsite

• Proven experience reviewing client contract provisions related to data security, breach reporting, cyber resilience, and compliance certifications and measuring compliance in IT and security architecture and operations.
• Regulatory Compliance Risk Management
• Support independent certification and audit byworking with D&IT peer groups and lines of business to collect documentation and evidence of security policies and operations
• Request and review documentation and evidence from control owners to certify and validate compliance to standards and industry-accepted best practice
• Monitor regulatory and legal landscape at aglobal scale and across market sectors and maintain awareness of compliance requirements
• Act as an informed voice in development ofpolicy and ensure alignment with regulatory, legal, and contractual requirements
• Assist establishment and enforcement of standards of practice documentation to be referenced by architecture and operations teams
• Contribute process and subject matter expertise in governance forums and cross-functional committees
• Support establishment, collection, and ongoing improvement of metrics to measure effectiveness of cyber risk management and provide data-driven insight to decision makers and control owners
• Collaborate with peer D&IT groups tocollect KPI’s, KRI’s and drive efficiency through automation and other means
• Supplier/Third Party Risk Management
• Contribute subject matter expertise through third party risk assessment process
• Identify and communicate risk of vendor engagements and mitigation actions to business owners and D&IT stakeholders
• Assist review of client security requirements in contracts and aggregate relevant clauses to inform contractual risk
• Assist development of user training aligned with cyber threat landscape, establish and implement metrics, and propose enhancements
• Assist with security certification/attestations/audits to demonstrate control effectiveness to independent service auditors/assessors and C3
  
  PAO’s
• Assist in development of risk treatment plansand monitoring progress of actions.
• Collaborate with members of the GRC team toensure timely and quality deliverables to internal and external customers
• Contribute subject matter expertise in reviewand response to internal and external sourced GRC related requests

• Bachelor’s degree in information systems,Information Security, or a related field
• 7–10 years of experience in GRC executing or auditing against standards, frameworks, and industry regulations
• Demonstrated experience supporting GRCfunctions for global companies
• Solid proficiency in risk assessment methodologies and frameworks
• Proven ability to assess alignment of internal policy, process, control design and operations, and cyber risk management with regulatory standards and frameworks
• Strong collaboration with IT teams
• Familiarity with industry standards and frameworks (e.g., NIST CSF and supporting SP’s, ISO 27001, AICPA SOC)
• Working knowledge of cyber and privacy laws and regulations
• Solid understanding of…