Security Governance & Compliance Analyst II

Yuhaaviatam of San Manuel Nation; Brier (WA); On-site; USD 90,000 - 120,000; Full time

Job summary

Yuhaaviatam of San Manuel Nation seeks a Governance Analyst II to develop, implement, and maintain policies and standards that safeguard enterprise assets and privacy compliance. The role leads PCI-related activities and partners with business units to identify risks and drive remediation.

The ideal candidate has a bachelor’s degree in information security or similar field and at least four years of policy-related experience in IT security, risk, or compliance.

Qualifications

• Bachelor’s degree in information security, technology, statistics, mathematics, or related field required.
• Minimum four (4) years of experience in documentation, procedures and/or policies of information technology, information systems, risk management, controls audit, vendor management, data privacy or information security required.

Responsibilities

• Create, review and update security policies and standards aligned with business objectives and privacy requirements.
• Lead PCI compliance efforts including remediation tracking and readiness for assessments.
• Engage with business units to identify risks and track mitigation plans and control gaps.
• Develop metrics for executive-level risk reporting dashboards.
• Provide guidance on governance, risk and compliance to cross-functional teams.

Skills

Policy development

Information security governance

Regulatory compliance

Risk assessment

Communication skills

Education

Bachelor’s degree in information security or related field

Tools

GRC platforms

PCI DSS familiarity

Job description

Yuhaaviatam of San Manuel Nation seeks a Governance Analyst II to develop, implement, and maintain policies and standards that safeguard enterprise assets and privacy compliance. The role leads PCI-related activities and partners with business units to identify risks and drive remediation.

The ideal candidate has a bachelor’s degree in information security or similar field and at least four years of policy-related experience in IT security, risk, or compliance.