GRC Associate Analyst: InfoSec Risk & Compliance

Jefferson; Orlando (FL); On-site; USD 70,000 - 95,000; Full time

Benefits offered by this job

Medical insurance

Tuition assistance

Professional development opportunities

Job summary

Jefferson seeks an information security professional to help ensure regulatory information security requirements are met and risks are managed effectively. You will develop and enforce security policies, conduct risk assessments, and align with legal and regulatory standards to protect organizational assets.

In this role you will support GRC programs, apply enterprise policies, assist in risk quantification, and contribute to security awareness and resilience training across the organization.

Qualifications

• Bachelor’s Degree in related field.
• Less than 1 year related work experience.

Responsibilities

• Assist in implementing an integrated Governance, Risk, and Compliance (GRC) program and tools to support GRC workflows.
• Apply established enterprise-wide information security policies, standards, and procedures to support robust information security and operational resilience.
• Assist in conducting risk assessments, including business impact assessments, third party risk assessments, and assessments of cloud systems.
• Gather data to inform the team on security posture, resilience gaps, and emerging threats.
• Assist in the prioritization and deployment of risk mitigation strategies using risk quantification methodologies.
• Advance the culture of compliance and resilience by assisting with enterprise-level information security awareness and business resilience training campaigns.

Skills

Information security

Regulatory compliance

Risk assessment

Policies & procedures

Security awareness

Education

Bachelor’s degree in related field

Job description

Jefferson seeks an information security professional to help ensure regulatory information security requirements are met and risks are managed effectively. You will develop and enforce security policies, conduct risk assessments, and align with legal and regulatory standards to protect organizational assets.

In this role you will support GRC programs, apply enterprise policies, assist in risk quantification, and contribute to security awareness and resilience training across the organization.