What are the responsibilities and job description for the Sr. GRC Analyst position at TalentFish?
Job Title : Sr. GRC Analyst
Primary Location : Chicago, Atlanta, NY or DC
Position Type : Direct Hire
Overview :
TalentFish is casting a line for a Senior Analyst, Cybersecurity Governance Risk & Compliance . This is a Direct Hire role in Chicago, Atlanta, NY or DC (Remote) The Senior Analyst, Cybersecurity Governance Risk & Compliance will administer the completion of compliance-related client requests to assess security policies and procedures. The Senior Analyst will respond to inquiries on the security controls policy, processes, and procedures implemented for the Firm managed systems and applications, as well as support Third Party Risk Management ( "TPRM") and Governance and Risk functions in conducting vendor due diligence (initial, reassessments and ongoing monitoring) and supporting broader GRC efforts. This position requires strong communication skills, initiative, attention to detail and the ability to learn quickly.
What You Bring to the Role. (Ideal Experience)
- Bachelor's degree (required); and
- At least 5 years of combined information technology and information security experience.
- Strong understanding of multiple risk management concepts, frameworks, and standards (CSC, NIST, ISO, COBIT).
- Demonstrated experience with the NIST Cybersecurity Framework and auditing security controls identified in NIST SP800-171 and NIST SP800-53A.
- Experience working with internal and external auditing firms.
- Strong understanding of information security concepts and technologies.
- Fundamental knowledge of MS Outlook, Word, Excel, Visio, and PowerPoint.
- Strong communication skills with the ability to interact with various teams within the administrative and legal departments.
- Experience in the analysis of IT and Security control requirements and understanding of associated technology processes; and
- Strong understanding of due diligence and compliance documents (e.g. SOC II Type II, ISO 27001 Certification, SIG Questionnaires, Certificates of Insurance, Pen Test, etc.).
What You'll Do. (Skills Used in this Position)
Compensation Information
The expected salary range for this position is 115-145k per year, depending on experience and qualifications. This role also qualifies for comprehensive benefits such as health insurance, company matched 401(k), and paid time off. TalentFish is committed to pay transparency and equal opportunity. The salary range provided is in compliance with applicable state and federal regulations.
TalentFish is an employee-owned company pioneering a new realm in talent acquisition. We are redefining IT staffing by evolving AI, video screening, and our unique platform. TalentFish focuses on providing the best employee, consultant, and client experience possible.
At TalentFish we are an Equal Opportunity Employer; we embrace and encourage diversity!