Senior InfoSec GRC Analyst

Senior GRC Analyst (Info Sec) job ine, CA.Description

Position at loan Depot

Position Summary
:

The Senior Info Sec GRC Analyst is responsible for driving the development, implementation, communication, and maintenance of loan Depot’s technology policies, standards and procedures that are aligned to industry standards and regulatory requirements. Ensures that loan Depot technology processes adheres to regulatory requirements, manages risks effectively, and establishes strong governance practices. Develops and implements controls, monitors compliance, and supports risk management activities.

Responsibilities:

• Leads the development and implementation of comprehensive cybersecurity and IT policies, standards, and guidelines.
• Continuously evaluates and updates cybersecurity and IT policies to ensure they remain current and effective.
• Ensures policies comply with relevant laws, regulations, and industry standards (e.g., NIST, FFIEC, GLBA, NYDFS, SOX and PCI-DSS).
• Collaborates with teams, working closely with IT, legal, compliance, and other departments, to gain a deep understanding of business needs to ensure cybersecurity policies align with business objectives.
• Transforms complex information and documentation into simple concepts that are easy to understand by the end-users.
• Offers specialized expertise and consultation to cross-functional teams to perform framework-oriented risk assessments, identify deficiencies, generate reports, and recommends prioritized, actionable solutions to mitigate risks and enhance loan Depot’s overall security posture.
• Stays informed about the latest cybersecurity threats, trends, and best practices. Ensures accurate and up-to-date records of policy reviews, risk assessments, training activities, and incident responses.
• Benchmarks the organization's policies against industry standards and best practices.
• Develops and implements governance frameworks for cybersecurity policy management.
• Monitors key performance indicators, conducts gap analysis, risk assessments and implements frameworks, as needed. Tests and monitors effectiveness of controls.
• Establishes a feedback loop and analyzes metrics to continuously improve cybersecurity policies based on audit findings, incident reviews, and emerging threats.
• Actively leads and supports on internal and external audits and assessments of cybersecurity policies and practices.
• Accountable for ensuring identified audit and assessment findings and actions are tracked to closure.
• Maintains comprehensive documentation of all cybersecurity policies, procedures, and related activities. Communicates policy requirements and updates to all relevant stakeholders.
• Identifies opportunities for innovation and improvement in cybersecurity policy and practice. Proposes suitable mitigation strategies and verifies the effectiveness of remediation plans

Requirements:

• Bachelor’s Degree in Information Security, Computer Science, Information Technology, or a related field preferred.
• Minimum of six (6) + years’ experience working in Cybersecurity GRC, policy development, risk management, or a similar field.
• Experience with GRC tools (e.g., Archer, Service Now, One Trust).
• Proficiency in using data analysis and reporting tools (e.g., Excel, Power BI).
• Relevant certifications such as CISM and/or CISA are highly desirable
• Demonstrates knowledge of, adherence to, monitoring and responsibility for compliance with state and federal regulations and laws as they pertain to this position.
• Knowledge of regulatory frameworks (NIST, FFIEC, GLBA, NYDFS, SOX and PCI-DSS).
• Understanding of risk management concepts, control frameworks, and compliance auditing.
• Ability to provide consultation and recommendations to management.
• Ability to present inside and/or outside the organization; speaking before assigned team or other groups as needed.

Why work for #teamloanDepot
:

• Aggressive compensation package based on experience and skill set.
• Inclusive, diverse, and collaborative culture where people from all backgrounds can thrive.
• Work with other passionate, purposeful, and customer-centric people.
• Extensive internal growth and professional development opportunities including tuition reimbursement.
• Compr…