Governance and Compliance Analyst

RELX; Atlanta (GA); On-site; USD 70,000 - 110,000; Full time

Job summary

An established industry player is seeking a skilled Governance, Risk, and Compliance (GRC) Analyst to enhance their cybersecurity governance program. In this pivotal role, you will lead the development of frameworks that align with industry standards, ensuring compliance with regulations while collaborating with diverse teams. Your expertise will drive security initiatives and help shape policies that protect sensitive information. Join a company committed to wellbeing and professional growth, where your contributions will support significant advancements in healthcare and research, making a real difference in society.

Benefits

Comprehensive Health Benefits

401(k) with match

Wellness platform with incentives

Short-and-Long Term Disability

Family Benefits

Paid leave for volunteering

Qualifications

• Experience with cybersecurity governance frameworks and compliance standards.
• Ability to develop and implement security programs effectively.

Responsibilities

• Design and maintain a comprehensive cybersecurity governance framework.
• Monitor compliance with internal policies and prepare for audits.

Skills

Cybersecurity Governance

Risk Management

Compliance Standards

Problem-Solving

Stakeholder Management

Communication Skills

Education

Bachelor's Degree in Information Security or related field

Tools

ISO 27001

NIST

COBIT

FedRamp

HIPAA

Job description

Are you looking to utilize your compliance and governance expertise as a critical member of our GRC team?

About the role: We are seeking an experienced Governance, Risk, and Compliance (GRC) Analyst to lead the development and implementation of our cybersecurity governance program and maintain compliance with our information security standards and frameworks. The successful candidate will have a deep understanding of cybersecurity frameworks, risk management, and compliance standards, and will work collaboratively with cross-functional teams to ensure alignment with business objectives and regulatory requirements.

About the team: This diverse team is ensuring that the GRC policy landscape is being adhered to and ensuring that all necessary protections are in place.

Key Responsibilities:

1. Designing, implementing, and maintaining a comprehensive cybersecurity governance framework that aligns with industry’s best practices (e.g., ISO 27001, NIST, COBIT).
2. Creating, reviewing, and updating cybersecurity policies and procedures to ensure compliance with applicable laws and regulations.
3. Monitoring compliance with internal policies and external regulations and prepare for audits and assessments.
4. Establishing enterprise level security governance structure, charters, participants and roles, and perform periodic role reviews to ensure appropriate accountability is maintained.
5. Working closely with IT, legal, and business units to ensure cybersecurity governance initiatives are integrated into overall business processes.
6. Driving security-related certification efforts such as ISO 27001, ISO 27701, ISO 27017, ISO 27018, ISO 42001, FedRamp, StateRamp, TX Ramp, HIPAA, PCI, etc.
7. Generating regular reporting including KPIs, metrics and SLAs reporting, executive reporting, and other ad hoc reporting as required by management.
8. Responsible for resolution of cybersecurity GRC issues.
9. Serving as a trusted advisor to the business and technology stakeholders across the enterprise to partner on security issues and stay aligned on common goals.

Requirements:

1. Experience designing, implementing, and maintaining a comprehensive cybersecurity governance framework that aligns with industry best practices (e.g., ISO 27001, NIST, COBIT).
2. Experience creating, reviewing and updating cybersecurity policies and procedures to ensure compliance with applicable laws and regulations.
3. Experience implementing cybersecurity and compliance related frameworks such as ISO 27001, ISO 27701, ISO 27017, ISO 27018, ISO 42001, FedRamp, StateRamp, TX Ramp, HIPAA, PCI, etc.
4. Experience managing an enterprise cybersecurity GRC program and defining cybersecurity controls, particularly related to regulatory, legislative, and industry-specific compliance requirements.
5. Ability to develop and implement security programs.
6. Advanced problem-solving experience involving leading teams in identifying, researching, and coordinating the resources necessary to effectively troubleshoot/diagnose complex project issues.
7. Advanced communication (verbal and written) and customer service skills.
8. Excellent stakeholder management skills.

Helpful Licensing/Certifications:

• Certified Information System Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• Certified Information Systems Auditor (CISA)

Work in a way that works for you:
We promote a healthy work/life balance across the organization. We offer an appealing working prospect for our people. With numerous wellbeing initiatives, shared parental leave, study assistance and sabbaticals, we will help you meet your immediate responsibilities and your long-term goals.

Working for you:
We know that your wellbeing and happiness are key to a long and successful career. These are some of the benefits we are delighted to offer:

• Health Benefits: Comprehensive, multi-carrier program for medical, dental and vision benefits
• Retirement Benefits: 401(k) with match and an Employee Share Purchase Plan
• Wellbeing: Wellness platform with incentives, Headspace app subscription, Employee Assistance and Time-off Programs
• Short-and-Long Term Disability, Life and Accidental Death Insurance, Critical Illness, and Hospital Indemnity
• Family Benefits, including bonding and family care leaves, adoption and surrogacy benefits
• Health Savings, Health Care, Dependent Care and Commuter Spending Accounts
• Up to two days of paid leave each to participate in Employee Resource Groups and to volunteer with your charity of choice

About the Business:
A global leader in information and analytics, we help researchers and healthcare professionals advance science and improve health outcomes for the benefit of society. Building on our publishing heritage, we combine quality information and vast data sets with analytics to support visionary science and research, health education and interactive learning, as well as exceptional healthcare and clinical practice. At Elsevier, your work contributes to the world’s grand challenges and a more sustainable future.

Elsevier is an equal opportunity employer: qualified applicants are considered for and treated during employment without regard to race, color, creed, religion, sex, national origin, citizenship status, disability status, protected veteran status, age, marital status, sexual orientation, gender identity, genetic information, or any other characteristic protected by law. We are committed to providing a fair and accessible hiring process. If you have a disability or other need that requires accommodation or adjustment, please let us know by completing our Applicant Request Support Form: https://forms.office.com/r/eVgFxjLmAK, or please contact 1-855-833-5120.

Please read our Candidate Privacy Policy.