Security GRC Analyst (UK Remote) Turnitin

CyberNorth; Town of Texas (WI); Remote; USD 80,000 - 120,000; Full time

Job summary

A prominent technology company is seeking a skilled Security GRC Analyst to ensure compliance with various regulatory frameworks and industry standards. The role involves collaboration across departments, conducting risk assessments, and developing security policies. The ideal candidate will have strong analytical skills, attention to detail, and compliance experience, contributing to a robust security culture.

Qualifications

• Experience with regulatory frameworks such as NIST CSF, NIST 800-53, SOC 2, TX-RAMP, and PCI DSS.
• Hands-on compliance experience with a willingness to learn and adapt.
• Ability to conduct risk assessments and audits.

Responsibilities

• Maintain compliance tracking and conduct assessments for adherence to security programs.
• Lead audit preparations for SOC 2 Type 2 and collaborate with internal/external teams.
• Provide security training and support compliance initiatives.

Skills

Analytical ability

Attention to detail

Compliance experience

Effective communication

Critical thinking

Job description

Turnitin is seeking an experienced Security GRC Analyst to join our Security & Compliance team. The Sr Security GRC Analyst will be responsible for ensuring that our information and cloud systems comply with relevant regulatory frameworks, industry standards, and internal policies. They will also collaborate with various departments, monitor compliance, conduct assessments, and support initiatives to identify and mitigate risks.

We are looking for someone who brings strong analytical ability, attention to detail, effectivecommunication, compliance experience, and the willingness to continuously learn. This role requireshands-on work, critical thinking and the ability to find new solutions for compliance.

This role reports to the GRC Information Security Manager.

Responsibilities:

Maintain compliance tracking capabilities to help ensure adherence with Turnitin’s security program and industry standards such as NIST CSF, NIST 800-53, SOC 2, TX-RAMP and PCI DSS.
Conduct risk and compliance assessments, audits, and risk evaluations to identify potential risk and compliance gaps.
Lead preparation and audit activities required to maintain our SOC 2 Type 2.
Collaborate with internal teams and external auditors for audit and compliance reviews.
Collaborate with sales and customer support teams to respond to security questionnaires and security posture questions from customers.
Support TPRM Program and conduct third-party risk assessments.
Complete user access reviews.
Administration of GRC platform.
Participate in the development and documentation of security policy, standards and processes to align with company information security strategy.
Provide security awareness and phishing training for employees and promote a culture of security and compliance.
Coordinate phish testing.
Collaborate with DevOps, IT, Legal, Engineering, People Team, and other departments to ensure security control and policy requirements are integrated into systems and business processes.
Provide input on ways to improve and automate team processes.