Security Governance, Risk, Compliance Analyst

Job Title

Pay Range: $67.41hr - $89.88hr

• Data Governance, AI development and Governance, Security Risk Management.
• Functional knowledge of the CISSP security domains and information security industry standard and best practices.
• Functional knowledge of applicable security regulatory and compliance requirements (EU AI Act, SOX, GDPR).
• Functional knowledge of ISMS governance models and analysis of certification reports (e.g., ISO 42001 & 27001, SOC, CAIQ), information security roles, and security controls.
• Strong attention to detail, project management and organizational skills.
• Self-starter with the ability to effectively manage independent workloads asynchronously with stakeholders across multiple time zones.

• Support the GRC operating model and the service-oriented customer engagement model.
• Provide Information Security Data Governance program expertise and drive the operational delivery of the program.
• Provide AI Governance and development expertise to business units and key stakeholders.
• Utilize current tools to design, build, and enhance team processes using AI agents and intelligent workflows.
• Maintain AI roadmaps and related communications to security leadership.
• Provide Information Security Risk Management support and assist with the operational delivery of the program.
• Develop and present regular operational and executive level metrics and reporting.
• Perform risk assessments to address security threats, changes to systems and/or applications, process improvement initiatives, supplier assessments, and other requests from the business.
• Collaborate with various operational and business teams to complete assessments, develop treatment plans, and drive remediation items to closure.
• Maintain accurate reporting of remediation activities to bring appropriate visibility to stakeholders and leadership.
• Monitor the security risk profiles and events of suppliers to objectively determine high risk suppliers that require additional review and treatment plans.
• Act as security governance and risk management ambassador to internal customers.
• Align governance and operational activities to industry best practices and current standards, as defined by internal policies and international standards bodies.
• Develop processes to utilize AI functionality to improve and enhance efficiencies, without sacrificing quality and accuracy.
• Build new AI-driven internal processes to assist with prioritizing and risk-scoring activities.
• Use defined risk methodologies and best practices to perform Security assessments, including planning, scoping, tracking, and execution.
• Drive remediation activities from identification and treatment planning through to remediation and closure.
• Operationalize a metrics and reporting function to continually report on meaningful security, risk, and compliance metrics for operational and executive management.
• Support the automation of KRIs and KPI reporting that align with operational/business risk areas and corporate risk.

• AI-related certifications.

• Data Governance.
• AI Governance.
• Security Risk Management.
• AI Agents and Intelligent Workflows.
• Risk Assessment.
• Metric Reporting.
• Project Management.
• CISSP Domains.
• ISO 42001.
• ISO 27001.
• SOC.
• CAIQ.

• Competent industry certifications.
• At least 7+ years professional experience in governance, risk and compliance and/or information security and risk management.
• Excellent communication and presentation skills.
• Ability to communicate information security methodologies and concepts to business units and IT teams.
• Ability to independently drive program areas and cross-functional teams to deliver high quality results according to well-defined planning.
• Strong interpersonal skills and ability to work effectively with diverse and globally distributed teams.
• Ability to communicate effectively with stakeholders.