GRC Analyst || Deerfield Beach, FL (Hybrid)

Verito Solutions; Deerfield Beach (FL); Hybrid; USD 70,000 - 110,000; Full time

Benefits offered by this job

Restaurant d'entreprise

Indemnités de stage/alternance

Job summary

Verito Solutions in Deerfield Beach, FL is seeking a GRC Analyst to support governance and compliance within the Information Security department. The role focuses on IT governance, risk management, and compliance programs across SOC 1 Type 2, MAR, NY DFS 500, CCPA, HIPAA, with collaboration across business units.

The analyst will manage controls, perform gap analysis, support IT audits, and communicate findings to stakeholders while advancing security and privacy initiatives in a hybrid work

Qualifications

• Project management experience handling multiple complex activities.
• Knowledge of controls frameworks and regulatory mandates (e.g., NIST, CIS, COBIT, CCPA, HIPAA, SOC 1 Type 2, MAR).
• Ability to conduct research on security issues, vendors, and applications.

Responsibilities

• Ensure regulatory compliance (SOC 1 Type 2, MAR, NY DFS 500, CCPA) and internal controls with proactive validation.
• Review IT regulatory matters and perform gap analysis for a shared services provider.
• Implement and maintain IT security and privacy controls framework; develop and maintain IT policies and procedures.
• Engage control owners and stakeholders to collect evidence and assess compliance across requirements.
• Facilitate IT audits and remediate findings; communicate governance status to leadership.

Skills

Project management

Controls frameworks

Regulatory research

Job description

GRC Analyst

Deerfield Beach, FL (Hybrid)

Phone + Video

Job Description

The Governance and Compliance Sr. Analyst will report to the Governance and Compliance Manager and support the Information Security department to provide the highest quality assurance program to our customers. The Governance and Compliance Sr. Analyst will perform a critical role in providing IT governance and compliance as a service, including assessments and compliance program management and assurance. The Governance and Compliance Sr. Analyst will manage, measure, operationalize and communicate a myriad of compliance initiatives across the enterprise, including but not limited to SOC 1 Type 2, MAR, NY DFS 500, CCPA, HIPAA. Collaboration with business areas within JM Family will be a key success criterion for this individual.

Responsibilities

• Ensure the compliance with regulatory requirements (e.g., SOC 1 Type 2, MAR, NY DFS 500, CCPA) and internal controls with proactive validation of controls
• Review regulatory and compliance matters related to information technology, as the shared-service provider for all business units and perform necessary gap analysis
• Implement and maintain an information technology, including security and privacy, controls framework
• Development and maintenance of IT policies, standard and procedures
• Act as an advocate for information security practices
• Engage control owners (of varying information security acumen and expertise) and key stakeholders across the enterprise to collect and test evidence and assess compliance to various requirements (external regulatory and contractual, as well as internal controls)
• Maintain and foster relationships and trust with key partners throughout the company
• Maintain compliance and risk management initiatives in a GRC platform
• Facilitate IT audits and assessments, including remediation of any findings noted
• Understand contractual elements with third parties and intelligently speak on the security requirements of a contract from an information security point of view
• Maintain reliable, up-to-date, information from the government and across the industry regarding identification of new security standards and governance
• Establish governance around disaster recovery function and collaborate with key business and IT leaders to develop security and disaster recovery standards and action plans
• As directed, conduct periodic internal assessments for security risk and compliance
• Perform other essential duties as assigned

Desired Skills

• Project management skills for managing multiple complex activities
• Knowledge of controls frameworks and applicable regulatory compliance mandates (e.g., NIST, CIS CSC, COBIT, CCPA, HIPAA, GLBA, SOC 1 Type 2, MAR)
• Conduct research in keeping abreast of latest security issues, Third Party Vendors, and applications as needed

Job Requirements

• Working knowledge of governance and compliance, including policy, process, governance, controls frameworks, and regulatory environments
• Knowledge to evaluate, build and optimize security program elements as assigned (e.g., logical access control, application security, vendor risk management, network security, privacy)
• Experience in working with auditors
• Strong organizational skills with ability to thrive in a sense-of-urgency environment, leveraging best practices, and approaching any problem as a team.