Hybrid Governance & Compliance Analyst

Gravity IT Resources; Deerfield Beach (FL); Hybrid; USD 90,000 - 130,000; Part time

Job summary

Gravity IT Resources seeks a Governance and Compliance Analyst to support the information security department by providing IT governance and compliance as a service. You will manage assessments, compliance program management, and assurance activities, collaborating with business areas to meet standards like SOC 1 Type 2, MAR, NY DFS 500, CCPA and HIPAA as well as contractual security requirements.

Strong communication is essential.

Qualifications

• Working knowledge of governance and compliance, including policy, process, controls frameworks, and regulatory environments.
• Experience evaluating, building, and optimizing security program elements (e.g., logical access control, application security, vendor risk management, network security, privacy).
• Strong organizational skills to thrive in a sense-of-urgency environment and leverage best practices.
• Excellent written and verbal communication skills for interfacing across all levels of the organization.
• Strong analytical, problem solving, and decision-making skills with a solution-focused attitude.
• Self-directed work habits demonstrating initiative, drive, creativity, professionalism, and maturity.
• Experience working with auditors.

Responsibilities

• Ensure compliance with regulatory requirements and internal controls through proactive validation of controls.
• Review regulatory and compliance matters related to information technology and perform gap analysis.
• Implement and maintain IT, security, and privacy controls framework.
• Develop and maintain IT policies, standards, and procedures.
• Act as an advocate for information security practices.
• Engage control owners and key stakeholders across the enterprise to collect, test evidence, and assess compliance.
• Maintain relationships and trust with key partners throughout the company.
• Manage compliance and risk initiatives in a GRC platform.
• Facilitate IT audits and assessments, including remediation of findings.
• Understand contractual security requirements for third parties and speak knowledgeably on contractual security aspects.
• Stay informed about new security standards and governance through industry and government sources.
• Establish governance around disaster recovery, developing standards and action plans in collaboration with business and IT leaders.
• Conduct periodic internal assessments for security risk and compliance as directed.

Skills

Governance & compliance

Regulatory frameworks

IT security concepts

Vendor risk management

Auditing cooperation

Communication skills

Policy development

Tools

GRC platform

Job description

Gravity IT Resources seeks a Governance and Compliance Analyst to support the information security department by providing IT governance and compliance as a service. You will manage assessments, compliance program management, and assurance activities, collaborating with business areas to meet standards like SOC 1 Type 2, MAR, NY DFS 500, CCPA and HIPAA as well as contractual security requirements.

Strong communication is essential.