Governance and Compliance Analyst

Elsevier; Atlanta (GA); On-site; USD 70,000 - 110,000; Full time

Job summary

An established industry player is seeking a Governance and Compliance Analyst to enhance its cybersecurity governance program. This role involves designing frameworks, ensuring compliance with standards like ISO 27001 and NIST, and collaborating across teams to align security goals with business objectives. The ideal candidate will possess strong problem-solving skills and a deep understanding of risk management. Join a dynamic team that values work/life balance, offering flexible hours and comprehensive benefits, including medical coverage and parental leave. This is a fantastic opportunity to contribute to meaningful advancements in science and healthcare.

Benefits

Medical, dental, and vision coverage

401(k) with match

Wellbeing programs

Disability and life insurance

Paid volunteer days

Qualifications

• Experience designing and maintaining cybersecurity governance frameworks.
• Strong understanding of cybersecurity frameworks and compliance standards.

Responsibilities

• Design and implement a cybersecurity governance framework aligned with best practices.
• Collaborate with IT and legal teams to integrate cybersecurity governance.

Skills

Cybersecurity Governance Frameworks

Risk Management

Compliance Standards

Problem-Solving Skills

Stakeholder Management

Education

Bachelor's Degree in a related field

Relevant Certifications (CISSP, CISM, CISA)

Tools

ISO 27001

NIST

COBIT

Job description

Join to apply for the Governance and Compliance Analyst role at Elsevier.

Are you looking to utilize your compliance and governance expertise as a key member of our GRC team?

About the role

We are seeking an experienced Governance, Risk, and Compliance (GRC) Analyst to develop and implement our cybersecurity governance program and ensure compliance with information security standards and frameworks. The successful candidate will have a strong understanding of cybersecurity frameworks, risk management, and compliance standards, collaborating with cross-functional teams to align with business objectives and regulatory requirements.

About the team

This diverse team ensures adherence to GRC policies and maintains necessary protections.

Key Responsibilities

• Design, implement, and maintain a cybersecurity governance framework aligned with industry best practices (e.g., ISO 27001, NIST, COBIT).
• Create, review, and update cybersecurity policies and procedures to ensure legal and regulatory compliance.
• Monitor compliance and prepare for audits and assessments.
• Establish enterprise-level security governance structures, roles, and responsibilities, with periodic reviews.
• Collaborate with IT, legal, and business units to integrate cybersecurity governance into overall processes.
• Drive certification efforts (ISO 27001, ISO 27701, ISO 27017, ISO 27018, ISO 42001, FedRamp, StateRamp, TX Ramp, HIPAA, PCI, etc.) and report on risk initiatives to stakeholders.
• Resolve cybersecurity GRC issues.
• Act as a trusted advisor to stakeholders, aligning security goals across the enterprise.

Requirements

• Experience designing and maintaining cybersecurity governance frameworks per industry standards.
• Experience creating and updating cybersecurity policies ensuring compliance.
• Experience with cybersecurity frameworks like ISO 27001, NIST, COBIT, and regulatory compliance.
• Experience managing enterprise GRC programs and defining controls related to compliance.
• Ability to develop and implement security programs.
• Strong problem-solving skills, leadership, and ability to troubleshoot complex issues.
• Excellent communication and stakeholder management skills.

Helpful Licensing/Certifications

• CISSP
• CISM
• CISA

Work in a way that works for you

We promote work/life balance with flexible hours, wellbeing initiatives, parental leave, study support, and sabbaticals.

Benefits

• Medical, dental, vision coverage
• 401(k) with match and Employee Share Purchase Plan
• Wellbeing programs, Headspace subscription, Employee Assistance
• Disability, life, critical illness insurance
• Family benefits, including parental leave and adoption support
• Spending accounts and paid volunteer days

About Elsevier

We are a global leader in information and analytics, supporting science and healthcare advancements. Our work contributes to societal challenges and sustainability, leveraging innovative technologies to improve health and research outcomes.

Elsevier is an equal opportunity employer. We ensure a fair hiring process and provide accommodations for applicants with disabilities. For support, contact us via the provided forms or phone number.

Additional details

• Seniority level: Mid-Senior level
• Employment type: Full-time
• Job function: Legal
• Industries: IT Services and IT Consulting