Position: GRC Analyst

Location: Boston, MA

Onsite Expectations: Hybrid, (1/2) days per week

Size of Firm: 500

Target Salary: $130,000 - $150,000 (no Bonus / Non-OT eligible)

Job Functions:

• Assist with continued development and enhancements to the firm’s governance, risk management and compliance program.
• Support the firm’s client’s by responding to information security assessments.
• Perform information security risk assessments on the firm’s third-party vendors and suppliers.
• Collaborate with the Information Security Director and other stakeholders to improve security procedures, training, IT processes, and the security of existing systems.
• Review and update the firm’s information security policies.
• Track and schedule activities related to certifying the firm’s Information Security Management System’s ISO27001 certification.
• Coordinate with other IT teams and other departments to perform risk assessments and track risk mitigation and remediation.
• Effectively communicates with stakeholders at all levels of the organization.
• Analyzes and reports on risk trends and metrics.
• Analyze client and stakeholder requirements in support of Business Continuity planning efforts.
• Support development of Business Continuity and Disaster Recovery plans and related documents in accordance with recognized standards and best practices.

Ideal Qualifications:

• Bachelor’s degree or equivalent experience in Information Systems Security or related field.
• 3 years of relevant experience working in a related role.