IT Security Compliance Analyst/ GRC Security Analyst

Gardner Resources Consulting, LLC; Cambridge (MA); On-site; USD 90,000 - 130,000; Full time

Job summary

Gardner Resources Consulting, LLC is seeking a security compliance professional to support the design and implementation of practical, scalable security controls that mitigate risks. You will understand technical details necessary to support these controls and assist in maintaining the security controls and policies.

The role involves participating in audits, supporting IT security policies, risk assessments, and corrective action plans, and liaising between technical teams and compliance

Responsibilities

• Understand technical implementation details necessary to support the design of practical and scalable security controls to mitigate risks.
• Assist in maintaining the suite of security controls and policies.
• Assist in performing audits using industry standard security methods to help strengthen internal security controls, procedures, and policies.
• Assist with the development, implementation, and execution of BILH-wide information security training and awareness programs.
• Support the development of required corrective action plans relating to security risks and compliance requirements.
• Support the implementation and maintenance of technical security controls required to mitigate risks.
• Implement security procedures to address compliance requirements; perform annual risk assessment and business impact analysis.
• Support security audits by working with internal tools and infrastructure to ensure the effectiveness of control implementations and to produce evidence for external audits.
• Participate in team problem solving efforts and offer ideas to solve compliance issues.
• Act as a security compliance liaison with technical subject matter experts.
• Work with IT Security team in the development and acceptance of IT policies and procedures.
• Ensure program standards follow applicable State and Federal regulatory requirements.
• Maintains professional and technical knowledge by attending industry workshops, conferences, and participating in personal and professional networks.

Job description

• Understand technical implementation details necessary to support the design of practical and scalable security controls to mitigate risks.
• Assist in maintaining the suite of security controls and policies.
• Assist in performing audits using industry standard security methods to help strengthen internal security controls, procedures, and policies.
• Assist with the development, implementation, and execution of BILH-wide information security training and awareness programs.
• Support the development of required corrective action plans relating to security risks and compliance requirements.
• Support the implementation and maintenance of technical security controls required to mitigate risks.
• Implement security procedures to address compliance requirements; perform annual risk assessment and business impact analysis.
• Support security audits by working with internal tools and infrastructure to ensure the effectiveness of control implementations and to produce evidence for external audits.
• Participate in team problem solving efforts and offer ideas to solve compliance issues.
• Act as a security compliance liaison with technical subject matter experts.
• Work with IT Security team in the development and acceptance of IT policies and procedures.
• Ensure program standards follow applicable State and Federal regulatory requirements.
• Maintains professional and technical knowledge by attending industry workshops, conferences, and participating in personal and professional networks.