Information Security Assurance Analyst I

Global Payments; Jeffersonville (IN); Vor Ort; USD 120.000 - 180.000; Vollzeit

Benefits dieser Stelle

Health benefits

Zusammenfassung

Global Payments is seeking a senior information security professional to provide technical guidance on policies, procedures, technologies, and compliance through First Line Assurance assessments. You will collaborate with Information Security and Technology to validate controls, identify gaps, support remediation, and contribute to certification and continuous monitoring programs.

Automation is emphasized: experience with Power Automate, Power BI, dashboards, and workflow automation is highly

Qualifikationen

• Bachelor's and/or Master’s Degree in Computer Science, Information Security, or related information technology field, and/or equivalent work experience.
• 7+ years of experience in information security, assurance, audit, risk, compliance or related tech functions.
• Knowledge of PCI, FFIEC, FISMA, SOX, HIPAA, NIST and related security control frameworks.
• Certifications such as CRISC, CGRC, CISM, CISSP, CISA, CySA+ or equivalent preferred.
• Experience with on-prem, cloud, and hybrid environments and multiple cloud providers.

Aufgaben

• Collaborates with stakeholders to support First Line Assurance objectives and communicates findings clearly.
• Performs targeted control assessments, post-deployment security validations, and remediation tracking.
• Supports automation of control audits, evidence collection, testing, reporting, and continuous monitoring.
• Develops dashboards, data collection processes, and repeatable assessment workflows to reduce manual effort.
• Recommends remediation paths based on risk and control gap analysis.
• Reviews assurance findings to determine risk level and actions required.

Kenntnisse

Information security

Control assessments

Risk management

Stakeholder management

Automation tooling

Ausbildung

Bachelor's or Master’s in CS/InfoSec

Equivalent work experience

Tools

Power Automate

Power BI

ServiceNow

AuditBoard

Archer

Optro

Jobbeschreibung

Job Description Summary of This Role Provides technical guidance on information security policies, procedures, technologies, and compliance-related activities through execution of First Line Assurance assessments. Works with stakeholders across Information Security and Technology organizations to validate security control implementation and effectiveness, identify vulnerabilities and control gaps, support remediation activities, and contribute to certification, continuous monitoring, and automation programs. Automation emphasis: This First Line Assurance role supports an automation-first model for control audits, evidence collection, reporting, certification, and continuous monitoring. Experience with Power Automate, Power BI, dashboards, and workflow automation is highly desirable.

What Part Will You Play?

Collaborates with Information Security, Technology, Risk, Audit, and business stakeholders to support First Line Assurance objectives. Aligns assessment activities with business priorities and communicates findings in a clear, actionable manner. Performs targeted control assessments, operational assurance reviews, post-deployment security validations, and certification activities. Evaluates security control implementation and effectiveness, identifies control weaknesses and compliance gaps, assists with remediation tracking, and provides detailed findings and recommendations to stakeholders. Supports the automation of control audits, evidence collection, control testing, reporting, remediation tracking, certification, and continuous monitoring. Contributes to workflows, dashboards, data collection, and repeatable assessment processes that reduce manual effort and increase assurance coverage. Uses automation and reporting tools to streamline evidence collection, control validation, assessment execution, remediation tracking, and recurring assurance activities. Supports continuous monitoring, assurance, and validation activities by reviewing technical, administrative, and operational security controls. Analyzes assessment results, assists in development of automation opportunities, tracks remediation efforts, and contributes to recurring certification and reporting activities. Reviews business requests, assurance findings, and control exceptions to determine level of risk and appropriate remediation path. Informs management of security policy variances and control gaps. Not an exhaustive list; other duties as assigned.

What Are We Looking For in This Role?

Bachelor's and/or Master’s Degree in Computer Science, Information Security, or related information technology field, and/or a combination of equivalent and relevant work experience.

• Minimum 7+ years relevant experience in information security, security assurance, audit, risk, compliance, security architecture, security engineering, or related technology functions.
• Knowledge of industry standard security and compliance programs and frameworks including PCI, FFIEC, FISMA, SOX, GLBA, HIPAA, ISO-87001, NIST 800-53, NST CSF, NIST RMF, and/or related security control frameworks.
• Ability to work with stakeholders at multiple levels to identify risk, collect and evaluate evidence, document findings, and communicate practical remediation options.
• Required Certification(s) / Licensing: Professional certifications such as CRISC, CGRC, CISM, CISSP, CISA, CySA+, or equivalent experience are preferred.
• Desired Skills and Capabilities: Strong familiarity with on-prem, cloud, and hybrid environments, across connected and disconnected environments, in a complex and diverse Fortune 500.
• Familiarity with multiple cloud hosting environments is preferred, or at least strong familiarity in one of the three main cloud provider environments such as GCP, AWS, or Azure.
• Experience performing information security assessments, security control assessments, technical control testing, control design testing, control effectiveness testing, KPI/KRI testing & validation, operational assurance reviews, or post-deployment validation activities.
• Experience designing, implementing, or supporting automated security control validation processes, tooling, and infrastructure, to include strategic and continuous monitoring, audit resiliency, and/or evidence collection processes is highly desirable.
• Experience with Microsoft Power Apps Platform, including Power Automate and Power BI, or other metric and reporting data structures is desirable.
• Experience developing dashboards, metrics, assessment reports, or recurring assurance reporting from multiple data sources.
• Familiarity with workflow automation platforms such as ServiceNow and assessment or evidence tracking platforms such as Optro (fka AuditBoard), Archer, or similar audit / GRC tools.
• Knowledge of continuous monitoring, control validation, compliance automation, evidence collection, and remediation tracking concepts.
• Strong analytical, communication, and stakeholder management skills, with the ability to translate technical evidence into business-focused recommendations.

Skills / Knowledge

Having broad yet in-depth expertise and unique knowledge, uses skills to set and ensure success of company objectives and principles and to achieve goals in creative and effective ways within environments and situations that are complex and difficult. Having ownership of a function, major account, or matrix management responsibilities, uses knowledge to ensure success, strengthen relationships, expand the business through key initiatives, and lead matrix teams on complex projects.

Job Complexity

Works on issues that impact security assurance, technology risk management, control effectiveness, automation, reporting, and future concepts, products, or technologies. Creates formal networks with key decision makers and serves as a trusted partner to Information Security, Technology, Risk, Audit, and business stakeholders. Supervision Exercises wide latitude in determining objectives and approaches to critical assignments.

EEOC Statement

Global Payments is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, marital status, genetic information, national origin, disability, veteran status, and other protected characteristics. The EEO is the Law poster is available here. If you are made a conditional offer of employment and will be working in the United States, you will be required to undergo a drug test. In developing this job description care was taken to include all competencies and requirements needed to successfully perform the position. Reasonable accommodations will be provided for individuals with qualified disabilities both during the hiring process, as well as to allow the individual to perform the essential functions of the job, if hired.

Accommodations: Accessibility Requests

If you wish to request reasonable accommodations related to applying for employment or provide feedback about the accessibility of this website, please contact [e-mail].

Company Information

Global Payments and Worldpay recently joined forces, and we’re currently operating across two Workday application systems. At Global Payments (NYSE : GPN), we empower simple, fast, secure payments for everyone. And to do that, we’ve built a complete, worldwide commerce ecosystem that delivers software and services at scale to millions of companies around the world—from ambitious startups to global enterprises. Our team of 27,000 experts is dedicated to your success. Headquartered in Atlanta, Georgia, we're a Fortune 500® company and a member of the S&P 500 with worldwide reach spanning North America, Europe, Asia Pacific and Latin America. Wherever you are—or wherever you want to be—we’re there, ready to support you. For more information, visit company.globalpayments.com and follow Global Payments on X, LinkedIn and Facebook.