Governance, Risk and Compliance; GRC Security Analyst - HYBRID

Responsibilities

• Performs security assessments to determine effectiveness of implemented security controls.
• Assesses the security posture of systems throughout their life cycle.
• Leads management on risks and actions to monitor, remediate & report via the risk register.
• Assists with third party and supplier risk management programs and assessments.
• Assists in the analysis, controls, and management of risk assessments for the BSA/AML program, Identity Theft & Red Flags and other risk assessments.
• Assists with outside audit and certification activities including management of security questionnaires.
• Designs and conducts training for computer security education and awareness programs.
• Work effectively with IT vendors and managed services partners.

• B.S. or equivalent in Computer Science, Information Science & Technology, or related field. CISSP, CISA, or CISM preferred. Other information security certifications highly desired.
• 3+ years of experience in governance, risk, compliance, audit or information security within a regulated financial services environment.
• Experience in GLBA and Credit Union Compliance.
• Working knowledge of NIST SP 800 series, ISO/IEC 27000 series, and similar standards.
• Excellent verbal and written communication skills.
• Excellent oral, written and interpersonal skills with the ability to influence and work effectively with diverse groups of peers and business partners.
• Detail oriented with a demonstrated ability to work on multiple tasks simultaneously with strong organizational and prioritization skills.

• Hybrid work schedule (Los Angeles / Southern California area).
• Professional office and remote work environment.
• Standard business hours with occasional extended hours during audits or examinations.

• Medical, dental, and vision insurance.
• Life insurance.
• 401k Retirement Plan (matching contribution=5%, immediate vesting).
• Paid Time Off (PTO).
• Paid Holidays.
• Educational Reimbursement.

EOE