Information Security Assurance Analyst I

Global Payments; Alpharetta (GA); On-site; USD 140,000 - 190,000; Full time

Job summary

Global Payments in Alpharetta, GA is seeking an experienced information security professional to guide First Line Assurance activities and automate control evidence collection. You will collaborate across Information Security and Technology to validate control effectiveness and support remediation initiatives.

You’ll perform targeted assessments, post-deployment validations, and contribute to certification and continuous monitoring programs, with an automation-first mindset using Power Automate

Qualifications

• Bachelor's or Master's in CS/InfoSec or related field.
• 7+ years in information security, audit, risk, or compliance.
• Knowledge of PCI, FFIEC, FISMA, SOX, HIPAA, NIST frameworks.
• Ability to work with stakeholders at multiple levels.
• Certifications such as CRISC, CGRC, CISM, CISSP, CISA, CySA+ preferred.

Responsibilities

• Collaborate with Information Security, Technology, Risk, Audit, and business stakeholders to support First Line Assurance objectives.
• Perform targeted control assessments, operational assurance reviews, post-deployment security validations, and certification activities.
• Support automation of control audits, evidence collection, control testing, reporting, remediation tracking, certification, and continuous monitoring.
• Review business requests, assurance findings, and control exceptions to determine level of risk and remediation path.

Skills

Information security

Risk assessment

Audit and compliance

Stakeholder communication

Documentation

Education

Bachelor's/Master's in CS/InfoSec

Tools

Power Automate

Power BI

Power Platform

Job description

Job Description

Ready to take your careerglobal?

Make your mark at one of the biggest names in payments. We are seeking a candidate who can providestechnical guidance on information security policies, procedures, technologies, and compliance-related activities through execution of First Line Assurance assessments. Works with stakeholders across Information Security and Technology organizations tovalidatesecurity control implementation and effectiveness,identifyvulnerabilities and control gaps, support remediation activities, and contribute to certification, continuous monitoring, and automation programs.

Automation emphasis:

This First Line Assurance role supports an automation-first model for control audits, evidence collection, reporting, certification, and continuous monitoring. Experience with Power Automate, Power BI, dashboards, and workflow automation is highly desirable.

Whatyou’llown

• Collaborates with Information Security, Technology, Risk, Audit, and business stakeholders to support First Line Assuranceobjectives. Aligns assessment activities with business priorities and communicates findings in a clear, actionable manner.

• Performs targeted control assessments, operational assurance reviews, post-deployment security validations, and certification activities. Evaluates security control implementation and effectiveness,identifiescontrol weaknesses and compliance gaps,assistswith remediation tracking, and provides detailed findings and recommendations to stakeholders.

• Supports the automation of control audits, evidence collection, control testing, reporting, remediation tracking, certification, and continuous monitoring. Contributes to workflows, dashboards, data collection, and repeatable assessment processes that reduce manual effort and increase assurance coverage.

• Usesautomation and reporting tools to streamline evidence collection, control validation, assessment execution, remediation tracking, and recurring assurance activities. ExperiencewithPower Automate, Power BI, or similar workflow and reporting technologies is desirable.

• Supports continuous monitoring, assurance, and validation activities by reviewing technical, administrative, and operational security controls. Analyzes assessment results,assistsin development of automation opportunities, tracks remediation efforts, and contributes to recurring certification and reporting activities.

• Reviews business requests, assurance findings, and control exceptions todeterminelevelof risk andappropriate remediationpath. Informs management of security policy variances and control gaps.

• Not an exhaustive list; other duties as assigned.

Whatyou’llbring

• Bachelor'sand/orMaster'sDegree in Computer Science, Information Security,or related information technology field,and/ora combination ofequivalentandrelevantwork experience.

• Minimum7+yearsrelevant experience in information security, security assurance, audit, risk, compliance, security architecture, security engineering, or related technology functions.

• Knowledge of industry standard securityandcompliance programsand frameworksincluding PCI, FFIEC,FISMA,SOX, GLBA, HIPAA, ISO-87001, NIST 800-53, NST CSF, NIST RMF,and/orrelated security control frameworks.

• Ability to work with stakeholders at multiple levels toidentifyrisk, collect and evaluate evidence, document findings, and communicate practical remediation options.

• Required Certification(s) / Licensing- Professional certifications such asCRISC,CGRC,CISM,CISSP, CISA,CySA+, or equivalent experience are preferred.

It'sa bonus if you have

• Strong familiarity with on-prem, cloud, and hybrid environments, across connected and disconnected environments, in a complex and diverse Fortune500.

• Familiarity with multiple cloud hosting environments is preferred,or at least strong familiarity in one of the three main cloud provider environments such asGCP, AWS, or Azure.

• Experience performinginformationsecurityassessments, securitycontrol assessments, technical control testing,control design testing,