GRC Analyst

About the role

Analysts will work with customers to develop formalized information security policies, analyze the efficacy of current policies and procedures, evaluate the risks posed by third-party providers, provide security awareness training to clients, and provide insight into cybersecurity regulations. Responsibilities (including, but not limited to):

What you'll do

• Performing and assisting with cybersecurity due diligence assessments on behalf of clients
• Assisting with coordinating and collecting evidence for internal compliance initiatives (e.g., SOC 2 audits)
• Providing insight into updating internal information security documents and policies
• Assisting with executing security awareness training via KnowBe4
• Coordinating and working with clients to develop formalized Written Information Security Programs (WISPs) and AI governance programs

What you need

• Office 365
• SOP writing
• Due diligence
• Data privacy
• Compliance
• Any graduate

Good to have

• CISSP