IT GRC Analyst

Why consider this job opportunity:

• Opportunity for career advancement and growth within a leading immigration services firm
• Collaborative and team-oriented work environment with access to industry experts
• Involvement in innovative practices focusing on data privacy and security
• Chance to work with a diverse group of motivated professionals
• Support for IT compliance audits and risk management initiatives

• Demonstrate Fragomen’s secure operational environment through client questionnaires, audits, and assessments
• Support ISO 27001, SOC 2 type 2, and PCI audits by gathering and documenting compliance evidence
• Assist in vendor and third-party risk management processes
• Collaborate with various internal teams to resolve client support work items efficiently
• Produce clear and concise communication for escalated matters and suggest process improvements

• Minimum of 5 years of experience in the IT Security GRC field
• Strong understanding of information security and data privacy frameworks
• Experience supporting ISO
  27X series, SOC2, and PCI compliance requirements
• Knowledge of the global regulatory landscape, including GDPR
• Strong communication skills, both written and verbal

• Experience in risk management and project management, including developing remediation plans
• Familiarity with drafting IT policies that align with industry best practices
• Background in Big 4 or large consulting firms
• Experience supporting security awareness training programs