Security Analyst (Risk & Compliance)

What You Need for this Position

• 4-8 years of demonstrable experience in security risk management, auditing and compliance, with a focus on supporting security risk assessments and security audit and compliance activities.
• Good interpersonal communication skills with experience and confidence in collaborating with internal and external partners and stakeholders to develop productive relationships and achieve positive security risk management outcomes.
• Ability to learn quickly with a willingness to take ownership for new projects and learning new technologies and methodologies.
• Strong understanding of SOC 1 and SOC 2 frameworks and requirements.
• Proficiency in auditing principles, internal controls, and risk management.
• Good understanding of industry standards for compliance such as ISO 27001:2013, ISO 27701, PCI DSS, and SSAE 18 SOC 1 / SOC 2 attestation standards.
• Basic understanding of risk assessment methodologies and best practices.
• Ability and willingness to produce and maintain documentation and reports, specifically developing policies, standards, risk assessment reports, and other forms of Security Risk Management Program documentation.
• Proficiency with productivity and collaboration tools, such as Microsoft Office, Slack, Box, and Zoom.
• Excellent presentation and written communications skills and a team-focused attitude.
• Possess or actively seeking information security or IT audit certifications, such as CISSP, CISA, CISM CRISC, or their equivalent.