GRC Security Analyst — Risk & Compliance

Paymentus; Charlotte (NC); Vor Ort; USD 85.000 - 125.000; Vollzeit

Zusammenfassung

Paymentus is seeking an Information Security GRC Analyst to support governance, risk, and compliance activities across the organization. You will gather evidence, perform risk and gap analyses, and contribute to remediation plans while maintaining the central GRC repository.

The role requires collaboration with multiple departments, knowledge of audits (SOC 1/2, PCI DSS), and familiarity with GDPR, CCPA, NIST, and CIS Controls. Some after-hours work may be required.

Qualifikationen

• A bachelor's degree and 2 years of regulatory compliance or similar experience in payments or consumer finance.
• Working knowledge in risk management, audits (SOC 1, SOC 2, PCI DSS) and information security best practices.
• Basic understanding of regulatory compliance and information security frameworks such as GDPR, CCPA, NIST, CIS Controls, etc.
• Experience in dealing with internal / external resources across a variety of departments and office hierarchies
• Self-driven and high attention to detail
• Fantastic written and verbal communication skills
• Ability to operate in and maintain a fast pace and cadence
• Authorized to work lawfully in the United States of America

Aufgaben

• Support audit and compliance activities by gathering evidence, conducting preliminary assessments, and assisting in the remediation of audit findings.
• Maintain and monitor a central repository of audit evidence.
• Conduct gap analysis on various industry standard compliance and regulatory requirements.
• Track, update, and draft clear, concise policies, standards and procedures.
• Maintain an up-to-date risk register and track remediation status.
• Collaborate with various departments on GRC related objectives.
• Track and ensure compliance with IT and security controls covering a wide range of regulations.
• Follow up with team members driving progress on tracked issues.
• Develop and contribute to metrics and KPIs for CISO and executive management review.
• Review, update, and test governance plans such as the BCP, IRP and DR plans.
• Assist in the Development and delivery of security awareness and training programs to educate employees on security policies, procedures, and best practices.

Kenntnisse

Risk management

SOC/PCI DSS audits

Information security

Regulatory compliance

GDPR

CCPA

NIST

Written communication

Fast-paced work

Authorized to work in US

Ausbildung

Bachelor's degree

Jobbeschreibung

Paymentus is seeking an Information Security GRC Analyst to support governance, risk, and compliance activities across the organization. You will gather evidence, perform risk and gap analyses, and contribute to remediation plans while maintaining the central GRC repository.

The role requires collaboration with multiple departments, knowledge of audits (SOC 1/2, PCI DSS), and familiarity with GDPR, CCPA, NIST, and CIS Controls. Some after-hours work may be required.