GRC & Security Analyst — Vendor Risk & Compliance

Progyny; New York (NY); On-site; USD 70,000 - 80,000; Full time

Benefits offered by this job

Family-friendly benefits

401(k) plan with company match

Bonus program

Equity

Learning and development programs

Onsite meals/snacks

Job summary

Progyny is seeking a Security Analyst to support Governance, Risk & Compliance efforts across information security. You will drive vendor risk assessments, audits, and certification activities while maintaining ticket queues and assisting with security trainings.

Based in the United States, you will collaborate across departments, help manage incident response exercises, and support the overall GRC program with professional, organized execution.

Qualifications

• BS/BA in a related discipline or related work experience.
• Experience with Office365, Outlook/Gmail, Teams/Slack, etc.
• Strong analytical thinker who is organized and detail-oriented.
• Experience with working to deadlines and the ability to organize tasks within those deadlines.
• Team oriented approach to meeting our compliance requirements.
• Excellent verbal and written communication skills.

Responsibilities

• Conducts security assessments and audits of vendors through our vendor risk management platform. Prepares and coordinates corrective actions.
• Assist with the enforcement of information security policies, standards, and guidelines.
• Participates in tabletop exercises related to incident response and disaster recovery procedures.
• Participate in ticket queue management and assignment of tasks.
• Assist with the delivery of annual security awareness and privacy trainings.
• Assist with implementing Security GRC projects dashboard reporting.
• Participate in the internal audit program.
• Assist with remediation of control deficiencies and gaps identified internally and externally for SOC 2 TYPE II & HITRUST certification.
• Assist Control Owners in the maintenance & remediation of control activities for Internal Audit
• Contributes to the long-term information security roadmap

Skills

Analytical thinking

Detail oriented

Deadline driven

Team oriented

Communication skills

Office tools

Education

BS/BA in related discipline

Tools

Ticket management tools

Security assessment tools

Compliance platforms

Job description

Progyny is seeking a Security Analyst to support Governance, Risk & Compliance efforts across information security. You will drive vendor risk assessments, audits, and certification activities while maintaining ticket queues and assisting with security trainings.

Based in the United States, you will collaborate across departments, help manage incident response exercises, and support the overall GRC program with professional, organized execution.