Info. Governance and Compliance Analyst

Sr. Governance and Compliance Analyst

Location: Hybrid (Deerfield Beach, FL)
Duration: 12 month contract to begin Compensation: $50-60/hr Work Requirements: US Citizen, GC Holders or Authorized to Work in the US

• Execute program tasks related to the evaluation of security control framework maturity, such as stakeholder interviews, documentation reviews, and maturity quantification.
• Ensure compliance with regulatory requirements (e.g., SOC 1 Type 2, MAR, NY DFS 500, CCPA) and internal controls with proactive validation of controls.
• Review regulatory and compliance matters related to information technology, as the shared-service provider for all business units, and perform necessary gap analysis.
• Implement and maintain an information technology, including security and privacy, controls framework.
• Develop and maintain IT policies, standards and procedures.
• Act as an advocate for information security practices.
• Engage control owners (of varying information security acumen and expertise) and key stakeholders across the enterprise to collect and test evidence and assess compliance to various requirements (external regulatory and contractual, as well as internal controls).
• Maintain and foster relationships and trust with key partner(s) throughout the company.
• Maintain compliance and risk management initiatives in a GRC platform.
• Facilitate IT audits and assessments, including remediation of any findings noted.
• Understand contractual elements with third parties and intelligently speak on the security requirements of a contract from an information security point of view.
• Maintain reliable, up-to-date information from the government and across the industry regarding identification of new security standards and governance.
• Establish governance around disaster recovery function and collaborate with key business and IT leaders to develop security and disaster recovery standards and action plans.
• As directed, conduct periodic internal assessments for security risk and compliance.

• Working knowledge of governance and compliance, including policy, process, governance, controls frameworks, and regulatory environments.
• Knowledge to evaluate, build and optimize security program elements as assigned (e.g., logical access control, application security, vendor risk management, network security, privacy).
• Experience in working with auditors.
• Strong organizational skills with ability to thrive in a sense‑of‑urgency environment, leveraging best practices, and approaching any problem as a team‑player with a can‑do attitude.
• Strong written and verbal communication skills and ability to interface with all levels of business and executive leadership.
• Excellent analytical, problem‑solving, and decision‑making skills, applied with a solution‑focused attitude.
• Strong self‑directed work habits, exhibiting initiative, drive, creativity, maturity, self‑assurance and professionalism.
• License / Certificate (any of the following a plus): CISSP, CISA, CISM, CIPP, GIAC.

• Comprehensive medical benefits
• Competitive pay, 401(k)
• Retirement plan
• …and much more!

INSPYR Solutions provides Equal Employment Opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, or genetics. In addition to federal law requirements, INSPYR complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities.