GRC Analyst

GRC Analyst

12 Months Contract

100% Remote

Responsibilities

The GRC Analyst will execute the Information Security GRC program, advise the business on information security matters, and act as a liaison with Internal IT teams and External Auditors

Supports the initiatives of the Information Technology Governance, Risk, and Compliance Program and coordinates with the various lines of business as needed

Acts as an Information Security subject matter expert and escalation point for the various areas of Altimetrik

Monitors and analyzes security controls, risks, and metrics to identify trends and drive improvement

Participates in annual regulatory reporting activities (SOC 1)

Performs lifecycle management of Information Security related policies and standards

Works closely with various areas of IT to design, document, and test controls

Participates in Information Security projects, such as new technology implementations and enhancements to existing tools

Assists with Security Awareness and Controls Assurance

Stays updated with applicable compliance and regulatory requirements

Conduct self-audits, as appropriate