Information Security Assurance Analyst I

tsys; Alpharetta (GA); On-site; USD 130,000 - 190,000; Full time

Job summary

Global Payments seeks a senior information security professional to guide policies, procedures, technologies, and compliance through First Line Assurance assessments. You will validate control implementations, identify vulnerabilities, and support remediation, certification, and continuous monitoring.

The role emphasizes automation with Power Automate and Power BI, dashboards, and workflow automation. Collaboration with multiple stakeholders across Security and Technology is essential for

Qualifications

• Bachelor's and/or Master's in Computer Science, Information Security, or related IT field.
• 7+ years of relevant experience in information security, assurance, audit, risk, or compliance.
• Knowledge of PCI, FFIEC, FISMA, SOX, GLBA, HIPAA, ISO-27001, NIST 800-53, and related frameworks.
• Ability to work with stakeholders at multiple levels to identify risk and document remediation options.

Responsibilities

• Collaborate with Information Security, Technology, Risk, Audit, and business stakeholders to support First Line Assurance objectives.
• Perform targeted control assessments, operational assurance reviews, post-deployment security validations, and certification activities.
• Evaluate security control implementation, identify weaknesses, and assist remediation tracking.
• Support automation of audits, evidence collection, control testing, and reporting; contribute to dashboards and workflows.

Skills

Information security

Automation

Data dashboards

Risk assessment

Stakeholder communication

Education

Bachelor's and/or Master's Degree in Computer Science, Information Security, or related information technology field

Tools

Power Automate

Power BI

Job description

Every day, Global Payments makes it possible for millions of people to move money between buyers and sellers using our payments solutions for credit, debit, prepaid and merchant services. Our worldwide team helps over 3 million companies, more than 1,300 financial institutions and over 600 million cardholders grow with confidence and achieve amazing results. We are driven by our passion for success and we are proud to deliver best-in-class payment technology and software solutions. Join our dynamic team and make your mark on the payments technology landscape of tomorrow.

Ready to take your career global?

Make your mark at one of the biggest names in payments. We are seeking a candidate who can provides technical guidance on information security policies, procedures, technologies, and compliance-related activities through execution of First Line Assurance assessments. Works with stakeholders across Information Security and Technology organizations to validate security control implementation and effectiveness, identify vulnerabilities and control gaps, support remediation activities, and contribute to certification, continuous monitoring, and automation programs.

Automation emphasis: This First Line Assurance role supports an automation-first model for control audits, evidence collection, reporting, certification, and continuous monitoring. Experience with Power Automate, Power BI, dashboards, and workflow automation is highly desirable.

What you'll own

Collaborates with Information Security, Technology, Risk, Audit, and business stakeholders to support First Line Assurance objectives. Aligns assessment activities with business priorities and communicates findings in a clear, actionable manner.

Performs targeted control assessments, operational assurance reviews, post-deployment security validations, and certification activities. Evaluates security control implementation and effectiveness, identifies control weaknesses and compliance gaps, assists with remediation tracking, and provides detailed findings and recommendations to stakeholders.

Supports the automation of control audits, evidence collection, control testing, reporting, remediation tracking, certification, and continuous monitoring. Contributes to workflows, dashboards, data collection, and repeatable assessment processes that reduce manual effort and increase assurance coverage.

Uses automation and reporting tools to streamline evidence collection, control validation, assessment execution, remediation tracking, and recurring assurance activities. Experience with Power Automate, Power BI, or similar workflow and reporting technologies is desirable.

Supports continuous monitoring, assurance, and validation activities by reviewing technical, administrative, and operational security controls. Analyzes assessment results, assists in development of automation opportunities, tracks remediation efforts, and contributes to recurring certification and reporting activities.

Reviews business requests, assurance findings, and control exceptions to determine level of risk and appropriate remediation path. Informs management of security policy variances and control gaps.

Not an exhaustive list; other duties as assigned.

What you'll bring

Bachelor's and/or Master's Degree in Computer Science, Information Security, or related information technology field, and/or a combination of equivalent and relevant work experience.

Minimum 7+ years relevant experience in information security, security assurance, audit, risk, compliance, security architecture, security engineering, or related technology functions.

Knowledge of industry standard security and compliance programs and frameworks including PCI, FFIEC, FISMA, SOX, GLBA, HIPAA, ISO-87001, NIST 800-53, NST CSF, NIST RMF, and/or related security control frameworks.

Ability to work with stakeholders at multiple levels to identify risk, collect and evaluate evidence, document findings, and communicate practical remediation options.

Required Certification(s) / Licensing - Professional certifications such as CRISC, CGRC, CISM, CISSP, CISA, CySA+, or equivalent experience are preferred.

It's a bonus if you have

Strong familiarity with on-prem, cloud, and hybrid environments, across connected and disconnected environments, in a complex and diverse Fortune 500.

Familiarity with multiple cloud hosting environments is preferred, or at least strong familiarity in one of the three main cloud provider environments such as GCP, AWS, or Azure.

Experience performing information security assessments, security control assessments, technical control testing, control design testing, control effectiveness testing, KPI/KRI testing & validation, operational assurance reviews, or post-deployment validation activities.

Experience designing, implementing, or supporting automated security control validation processes, tooling, and infrastructure, to include strategic and continuous monitoring, audit resiliency, and/or evidence collection proce