GRC Analyst: IT Compliance & Security Governance

Verito Solutions; Deerfield Beach (FL); Hybrid; USD 70,000 - 110,000; Full time

Benefits offered by this job

Restaurant d'entreprise

Indemnités de stage/alternance

Job summary

Verito Solutions in Deerfield Beach, FL is seeking a GRC Analyst to support governance and compliance within the Information Security department. The role focuses on IT governance, risk management, and compliance programs across SOC 1 Type 2, MAR, NY DFS 500, CCPA, HIPAA, with collaboration across business units.

The analyst will manage controls, perform gap analysis, support IT audits, and communicate findings to stakeholders while advancing security and privacy initiatives in a hybrid work

Qualifications

• Project management experience handling multiple complex activities.
• Knowledge of controls frameworks and regulatory mandates (e.g., NIST, CIS, COBIT, CCPA, HIPAA, SOC 1 Type 2, MAR).
• Ability to conduct research on security issues, vendors, and applications.

Responsibilities

• Ensure regulatory compliance (SOC 1 Type 2, MAR, NY DFS 500, CCPA) and internal controls with proactive validation.
• Review IT regulatory matters and perform gap analysis for a shared services provider.
• Implement and maintain IT security and privacy controls framework; develop and maintain IT policies and procedures.
• Engage control owners and stakeholders to collect evidence and assess compliance across requirements.
• Facilitate IT audits and remediate findings; communicate governance status to leadership.

Skills

Project management

Controls frameworks

Regulatory research

Job description

Verito Solutions in Deerfield Beach, FL is seeking a GRC Analyst to support governance and compliance within the Information Security department. The role focuses on IT governance, risk management, and compliance programs across SOC 1 Type 2, MAR, NY DFS 500, CCPA, HIPAA, with collaboration across business units.

The analyst will manage controls, perform gap analysis, support IT audits, and communicate findings to stakeholders while advancing security and privacy initiatives in a hybrid work