Information Security Governance, Risk and Compliance Analyst II

The Information Security Governance, Risk & Compliance Analyst II will ensure information technology processes meet defined security controls and perform vulnerability analyses and risk assessments against the adequacy of those security controls. They will facilitate and manage risk-based control remediation activities. Equivalent experience can be used in lieu of degree.

• Leads internal and external security reviews, audits, and controls evaluations.
• Prepares security awareness training and phishing campaigns to enable a security aware organization
• Provides guidance and training for and mentors junior staff.
• Identify gaps in security design or controls and implement recommendations for remediation or mitigating controls.
• Supports the development, and report on security metrics.
• Performs vendor information security assessments.
• Ensure alignment of information security controls and processes with industry standards.
• Perform ongoing monitoring of third-party vendors.
• Collaborate with various key stakeholders to gain a common understanding of identified deficiencies/gap.