Info Governance and Compliance Analyst( Must have IT Audit experience)

INSPYR Solutions; Deerfield Beach (FL); Hybrid; USD 69,000 - 83,000; Full time

Benefits offered by this job

Comprehensive medical benefits

401(k)

Retirement plan

…and much more!

Job summary

INSPYR Solutions is seeking a Sr. Governance and Compliance Analyst with IT audit experience for a 6-month hybrid role in Deerfield Beach, FL. You will evaluate security controls, ensure regulatory compliance, and partner with auditors across the organization.

Responsibilities include developing IT policies, testing controls, and driving remediation in a shared services environment. Strong communication and analytical skills are essential.

Qualifications

• Knowledge of governance, policy, and controls frameworks across regulatory environments.
• Ability to evaluate, build and optimize security program elements (e.g., access control, vendor risk, privacy).
• Experience working with auditors and regulatory bodies.
• Strong written and verbal communication across all levels of leadership.

Responsibilities

• Execute tasks evaluating security control framework maturity through interviews, reviews, and maturity quantification.
• Ensure compliance with SOC 1 Type 2, MAR, NY DFS 500, CCPA and internal controls with proactive validation of controls.
• Review regulatory and compliance matters for IT governance and perform gap analyses.
• Develop and maintain IT policies, standards, and procedures; advocate for information security practices.
• Engage control owners and stakeholders to collect evidence and assess compliance with external and internal requirements.
• Maintain relationships with partners and manage governance and risk in a GRC platform.
• Facilitate IT audits and remediation of findings; understand contractual security requirements with third parties.

Skills

Governance & Compliance

Policy & Process

Regulatory Environments

Security Program Elements

Auditor Collaboration

Communication

Analytical Thinking

Initiative & Self-Management

Certifications (CISSP/CISA/CISM/CIPP/G

Tools

GRC Platform

Job description

Title:

Sr. Governance and Compliance Analyst (Must have IT Audit experience)

Location:

Hybrid 3 days onsite in Deerfield Beach, FL, 2 days remote

Duration:

6 months

Compensation:

50-60hr

Work Requirements:

US Citizen, GC Holders or Authorized to Work in the US

Job Description:

• Execute program tasks related to the evaluation of security control framework maturity, such as stakeholder interviews, documentation reviews, and maturity quantification.
• Ensure the compliance with regulatory requirements (e.g., SOC 1 Type 2, MAR, NY DFS 500, CCPA) and internal controls with proactive validation of controls.
• Review regulatory and compliance matters related to information technology, as the shared-service provider for all business units and perform necessary gap analysis
• Implement and maintain an information technology, including security and privacy, controls framework
• Development and maintenance of IT policies, standard and procedures
• Act as an advocate for information security practices
• Engage control owners (of varying information security acumen and expertise) and key stakeholders across the enterprise to collect and test evidence and assess compliance to various requirements (external regulatory and contractual, as well as internal controls)
• Maintain and foster relationships and trust with key partners throughout the company
• Maintain compliance and risk management initiatives in a GRC platform
• Facilitate IT audits and assessments, including remediation of any findings noted
• Understand contractual elements with third parties and intelligently speak on the security requirements of a contract from an information security point of view
• Maintain reliable, up-to-date, information from the government and across the industry regarding identification of new security standards and governance
• Establish governance around disaster recovery function and collaborate with key business and IT leaders to develop security and disaster recovery standards and action plans
• As directed, conduct periodic internal assessments for security risk and compliance

Skillset / Experience:

• Working knowledge of governance and compliance, including policy, process, governance, controls frameworks, and regulatory environments
• Knowledge to evaluate, build and optimize security program elements as assigned (e.g., logical access control, application security, vendor risk management, network security, privacy)
• Experience in working with auditors
• Strong organizational skills with ability to thrive in a sense-of-urgency environment, leveraging best practices, and approaching any problem as a team-player with a can-do attitude
• Strong written and verbal communication skills and ability to interface with all levels of business and executive leadership
• Excellent analytical, problem solving, and decision-making skills, applied with a solution-focused attitude
• Strong self-directed work habits, exhibiting initiative, drive, creativity, maturity, self-assurance and professionalism
• License / Certificate (any of the following a plus):
• CISSP, CISA, CISM, CIPP, GIAC

Our benefits package includes:

• Comprehensive medical benefits
• Competitive pay, 401(k)
• Retirement plan
• …and much more!

About INSPYR Solutions:

As a leading information technology partner, we connect top IT talent with our clients to provide innovative business solutions through our IT Staffing, Professional Services, and Infrastructure Solutions divisions. We understand and value the unique needs of highly-skilled information technology professionals in the industry and always strive to stay above the curve. Our company was founded on the following core values: Be the Best, Understand the Urgency, Never Ever Give Up, Have the Courage to Excel, and Make a Contribution. We take pride in our business model and strive to create a positive workplace environment through an exemplary culture.

#IND-TELECOM

INSPYR Solutions provides Equal Employment Opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, genetics, or any other protected status. INSPYR Solutions complies with all applicable laws governing nondiscrimination in employment in every location in which the company has facilities.
Applicants requiring reasonable accommodation during the application or interview process should contact [e-mail] for assistance.
Information collected and processed through your application with INSPYR Solutions (including any job applications you choose to submit) is subject to INSPYR Solutions' Privacy Policy and INSPYR Solutions' AI and Automated Employment Decision Tool Policy: https://www.inspyrsolutions.com/policies/. By submitting an application, you are consenting to being contacted by INSPYR Solutions through phone, email, or text.