InfoSec GRC Analyst — Governance & Compliance

Lancesoft; Foster City (CA); On-site; USD 110,000 - 124,000; Full time

Job summary

Lancesoft seeks an Information Security Governance Analyst to ensure adherence to governance, risk, and compliance standards. The role involves conducting internal assessments, risk analyses, and coordinating audits across IT, Product Security, and other departments onsite in Foster City, CA.

Requires 5+ years in security control assessments and strong knowledge of ISO 27001, NIST CSF, GDPR/CCPA. L5 candidates should have 8+ years of relevant experience; salary is hourly and onsite.

Qualifications

• 5+ years of conducting security control assessments or audits.
• Experience with information security standards and privacy laws (e.g., ISO 27001, NIST, GDPR, CCPA, CPRA).
• L5 candidates would be expected to have 8+ years of relevant experience.

Responsibilities

• Lead organization-wide compliance assessments and audits.
• Coordinate internal and external audits with IT, Product Security, and other departments.
• Develop and maintain the control framework and compliance documentation.
• Serve as liaison between IT and internal auditing teams to ensure regulatory alignment.

Skills

GRC frameworks

Risk assessment

ISO 27001

NIST CSF

GDPR/CCPA

Auditing

AI security

Analytical skills

ICS/SCADA experience

Education

Bachelor's degree

Tools

Vulnerability scanners

File integrity monitoring

Configuration monitoring

Perimeter security

Job description

Lancesoft seeks an Information Security Governance Analyst to ensure adherence to governance, risk, and compliance standards. The role involves conducting internal assessments, risk analyses, and coordinating audits across IT, Product Security, and other departments onsite in Foster City, CA.

Requires 5+ years in security control assessments and strong knowledge of ISO 27001, NIST CSF, GDPR/CCPA. L5 candidates should have 8+ years of relevant experience; salary is hourly and onsite.