Information Security Governance Analyst

Manpower, Inc.; Foster City (CA); Sur place; USD 110 000 - 117 000; Plein temps

Avantages offerts par ce poste

Medical plans

Vision Plan

Health Savings Account

Health Flexible Spending Account

Dependent Care Flexible Spending Plan

Life Insurance – Supplemental

Short/Long Term Disability Insurance

Business Travel Insurance

Weekly Pay

Résumé du poste

ManpowerGroup, the leading global workforce solutions company, seeks an Information Security Governance Analyst to strengthen governance across security controls and compliance programs in Foster City, CA. You will develop security management systems, coordinate audits, and drive remediation planning with IT, Product Security, and internal audit teams.

The role emphasizes strong analytical skills, clear written communication, and collaboration to improve security posture while aligning with

Qualifications

• 5+ years of experience conducting security control assessments or audits.
• 5+ years of experience with information security standards and privacy laws (e.g., ISO 27001, NIST, GDPR, CCPA, CPRA).
• Strong knowledge of GRC frameworks and tools, with application to compliance and audits.
• Proficiency in risk assessment methodologies and tools.
• Experience with security management tools including AI/ML, vulnerability scanners, and perimeter technologies.

Responsabilités

• Develop and implement security management systems tracking objectives and controls across the organization.
• Plan and lead organization-wide security audits to ensure compliance with policies, standards, and frameworks such as NIST 800-53, NIST CSF 2.0, and ISO 27001.
• Coordinate internal and external audits with IT, Product Security, and other departments to ensure consistent evidence and outcomes.
• Prepare, review, and maintain compliance documentation, ensuring it remains accurate and audit-ready.
• Conduct risk exposure assessments and support remediation planning based on security ROI considerations.

Connaissances

Security governance

Audit & controls

GRC frameworks

Risk assessment

Security tools & monitoring

Outils

GRC tools

Description du poste

Our client, a leader in autonomous mobility,is seeking an Information Security Governance Analyst to join their team. As an Information Security Governance Analyst, you will be part of the Information Technology and Applications supporting Information Security. The ideal candidate will have strong analytical thinking, clear written communication, and a collaborative mindset which will align successfully in the organization.

Job Title:Information Security Governance Analyst

Location:Foster City, CA

Pay Range:$80-$85/hour + Benefits

What's the Job?

• Develop and implement security management systems that track objectives and controls across the organization.
• Plan and lead organization-wide security audits to ensure compliance with policies, standards, and frameworks such as NIST 800-53, NIST CSF 2.0, and ISO 27001.
• Coordinate internal and external audits with IT, Product Security, and other departments to ensure consistent evidence and outcomes.
• Prepare, review, and maintain compliance documentation, ensuring it remains accurate, current, and audit-ready.
• Conduct risk exposure assessments, prioritize risks by impact and likelihood, and support remediation planning based on security ROI considerations.

What's Needed?

• 5+ years of experience conducting security control assessments or audits (L5 candidates expected to have 8+ years of relevant experience).
• 5+ years of experience with information security standards and privacy laws (e.g., ISO 27001, NIST, GDPR, CCPA, CPRA) (L5 candidates expected to have 8+ years of relevant experience).
• Strong knowledge of GRC frameworks and tools, with the ability to apply them to real-world compliance and audit activities.
• Proficiency in risk assessment methodologies and tools, including comparative risk assessments to evaluate solution impact.
• Comfort working with security management tools and technologies, including LLMs/AI/ML, vulnerability scanners, file integrity monitoring, configuration monitoring, and perimeter technologies (e.g., routers, firewalls, web proxies, intrusion prevention).

What's in it for me?

• Opportunity to strengthen information security governance by aligning controls, policies, and audits to recognized frameworks.
• Hands-on involvement in risk assessments and remediation planning that directly improve security posture.
• Cross-functional collaboration with IT, Product Security, internal auditing, and other departments to meet internal and external requirements.
• Exposure to compliance frameworks including NIST 800-53, NIST CSF 2.0, ISO 27001, and ISO 21434.
• A role built for candidates who enjoy structured problem-solving, documentation rigor, and continuous improvement.

Upon completion of waiting period consultants are eligible for:

• Medical and Prescription Drug Plans
• Vision Plan
• Health Savings Account
• Health Flexible Spending Account
• Dependent Care Flexible Spending Account
• Supplemental Life Insurance
• Short Term and Long Term Disability Insurance
• Business Travel Insurance
• Weekly Pay

About ManpowerGroup, Parent Company of: Manpower, Experis, Talent Solutions, and Jefferson Wells.

ManpowerGroup® (NYSE: MAN), the leading global workforce solutions company, helps organizations transform in a fast-changing world of work by sourcing, assessing, developing, and managing the talent that enables them to win. We develop innovative solutions for hundreds of thousands of organizations every year, providing them with skilled talent while finding meaningful, sustainable employment for millions of people across a wide range of industries and skills. Our expert family of brands – Manpower, Experis, Talent Solutions, and Jefferson Wells – creates substantial value for candidates and clients across more than 75 countries and territories and has done so for over 70 years. We are recognized consistently for our diversity - as a best place to work for Women, Inclusion, Equality and Disability and in 2023 ManpowerGroup was named one of the World's Most Ethical Companies for the 14th year - all confirming our position as the brand of choice for in-demand talent.