Policy Analyst: Security Governance & Compliance (NIST/ISO)

Insight Global; United States; Presencial; USD 90.000 - 120.000; Jornada completa

Descripción de la vacante

Insight Global is seeking a Policy Analyst skilled in security governance, risk, and compliance to help develop, maintain, and enhance enterprise security policies and standards. The role emphasizes policy creation, control mapping to NIST 800-53 and ISO 27001, and collaboration with cross-functional stakeholders to strengthen security posture.

The candidate will translate regulatory requirements into actionable documentation, perform gap analyses, and support audits and evidence collection,

Formación

• 3+ years of hands-on experience with NIST 800-53 controls.
• Experience writing, reviewing, and maintaining security policies, standards, and procedures.
• Strong knowledge of ISO 27001 and ISMS.
• Experience supporting governance, risk, and compliance initiatives.
• Ability to translate regulatory requirements into business-friendly documentation.
• Experience performing control mapping, gap assessments, and policy alignment.
• Excellent written communication and documentation skills.

Responsabilidades

• Develop, update, and maintain enterprise security policies, standards, and procedures.
• Map organizational controls to NIST 800-53 and ISO 27001 requirements.
• Conduct gap analyses and recommend policy improvements.
• Partner with security, compliance, legal, audit, and business stakeholders to ensure policy alignment.
• Support compliance assessments, audits, and evidence collection activities.
• Maintain documentation related to security governance and control frameworks.
• Assist with continuous improvement of security and compliance programs.

Conocimientos

NIST 800-53

Policy writing

ISO 27001

GRC

Policy mapping

Stakeholder collaboration

Herramientas

GRC platforms

Descripción del empleo

Insight Global is seeking a Policy Analyst skilled in security governance, risk, and compliance to help develop, maintain, and enhance enterprise security policies and standards. The role emphasizes policy creation, control mapping to NIST 800-53 and ISO 27001, and collaboration with cross-functional stakeholders to strengthen security posture.

The candidate will translate regulatory requirements into actionable documentation, perform gap analyses, and support audits and evidence collection,