Security & Compliance Analyst (GRC + Incident Response)

Old Republic; Tampa (FL); Sur place; USD 65 000 - 90 000; Plein temps

Résumé du poste

Old Republic is seeking a Security Analyst to support the BISO program and drive security initiatives across subsidiary centers. You will align with enterprise policies, regulatory requirements, and industry standards while collaborating with technical and business teams.

The role emphasizes risk assessments, control evaluations, incident response support, and continuous improvement of GRC processes across the organization. Strong communication and collaboration are essential.

Qualifications

• 2-3 years of experience in cybersecurity, GRC, or IT operations roles.
• Basic understanding of regulatory frameworks such as SOX, HIPAA, GDPR, PIPEDA, OSFI, NYDFS, or NIST CSF.
• Familiarity with GRC platforms and tooling.
• Strong communication and collaboration skills, with the ability to engage technical and non-technical stakeholders.
• Willingness to pursue relevant certifications (e.g., Security+, CGRC, CISA, CISSP).
• Experience supporting both GRC and technical cybersecurity teams.
• Exposure to secure application design principles or SDLC integration.
• Experience responding to customer security inquiries or supporting vendor risk assessments.
• Familiarity with audit coordination and evidence management processes.
• Hands-on experience with cybersecurity technologies or security platforms.
• Professional certifications such as: CompTIA Security+, CGRC, CISA, CISSP.

Responsabilités

• Fulfill tasks across cybersecurity disciplines to promote project and program support.
• Assist in risk assessments, application security reviews, and control evaluations to support enterprise security and compliance objectives.
• Assist in incident response support, acting as a liaison with enterprise and SOC teams.
• Support GRC service delivery, documentation, and vendor risk management.
• Support customer security inquiries and vendor risk management activities, including risk communication and remediation tracking.
• Ability to evaluate threats, vulnerabilities, and business impact.
• Ability to manage job functions proactively with maximum efficiency and results.
• Assist in the coordination of internal and external audits, including evidence collection and issue tracking.
• Develop risk metrics and dashboards to monitor control effectiveness.
• Familiarity with security concepts (identity management, access controls, network security, etc.)
• Help maintain security controls (e.g., anti-phishing, email filtering, DLP).
• Strong organizational skills and attention to detail. Build trust and influence through collaboration rather than enforcement.
• Use security tools and platforms to help internal customers solve problems and work securely, with oversight and guidance.

Connaissances

Cybersecurity concepts

GRC knowledge

Communication

Incident response

Formation

Bachelor’s degree in Information Security, Computer Science, Risk Management, or related field

Outils

GRC platforms

Description du poste

Old Republic is seeking a Security Analyst to support the BISO program and drive security initiatives across subsidiary centers. You will align with enterprise policies, regulatory requirements, and industry standards while collaborating with technical and business teams.

The role emphasizes risk assessments, control evaluations, incident response support, and continuous improvement of GRC processes across the organization. Strong communication and collaboration are essential.