Security Analyst

Key Responsibilities

• Facilitation, operation, and maintenance of Governance, Risk & Compliance (GRC) efforts to support Information Security and Compliance goals.
• Support audits for company certification programs.
• Perform regular security reviews of vendors and partners.
• Maintain ticket queues for internal and client requests.
• Assist with tasks identified by the GRC Manager.
• Conduct security assessments and audits of vendors using a vendor risk management platform, and prepare/coordinate corrective actions.
• Assist with the enforcement of information security policies, standards, and guidelines.
• Participate in tabletop exercises for incident response and disaster recovery procedures.
• Participate in ticket queue management and task assignment.
• Assist with the delivery of annual security awareness and privacy trainings.
• Assist with implementing Security GRC projects and dashboard reporting.
• Participate in the internal audit program.
• Assist with the remediation of control deficiencies and gaps identified internally and externally for SOC 2 TYPE II & HITRUST certification.
• Assist Control Owners in the maintenance and remediation of control activities for Internal Audit.
• Contribute to the long-term information security roadmap.

Requirements & Tech Stack

• BS/BA in a related discipline or related work experience.
• Experience working with office and communication tools (e.g., Office365, Outlook/Gmail, Teams/Slack).
• Strong analytical thinking.
• Organized and detail-oriented.
• Experience working to deadlines and organizing tasks within those deadlines.
• Team-oriented approach to meeting compliance requirements.
• Excellent verbal and written communication skills.

Nice to Have

• Experience with common ticket management tools, Security assessment tools, or other compliance platforms.
• Working knowledge of HIPAA or common compliance standards like PCI, SOX, or NIST.