Senior GRC & InfoSec Compliance Analyst

Recruithook; Fort Lee (NJ); Presencial; USD 110.000 - 150.000; Jornada completa

Descripción de la vacante

Recruithook is seeking an experienced Governance, Risk & Compliance (GRC) professional in New Jersey to support information security, compliance, risk management, and reporting initiatives. This role helps strengthen the organization’s security and compliance programs while collaborating across teams to promote a security-first culture.

The ideal candidate has 5–8 years in GRC or related fields, deep knowledge of US privacy and cybersecurity requirements, and hands-on experience with controls,

Formación

• 5–8 years of experience in GRC, information security, IT audit, compliance, or a related field.
• Strong knowledge of at least two U.S. privacy, cybersecurity, or federal regulatory requirements (e.g., CCPA/CPRA, NIST, GDPR, FTC).
• Expertise in at least four areas such as ISO 27001, ISO 42001, SOC, SOX, COSO/COBIT, privacy regulations, ITGC/ITAC controls, risk assessments, or internal audit.
• Strong written and verbal communication skills.
• Ability to work cross-functionally and manage multiple priorities.

Responsabilidades

• Support implementation of policies, standards, and procedures aligned with ISO 27001, ISO 42001, NIST, GDPR, GLBA, CCPA, and other applicable regulations.
• Conduct risk, vulnerability, and gap assessments and help identify and remediate compliance gaps.
• Perform SOX, SOC 1/SOC 2, ITGC/ITAC, internal audit, and privacy control testing.
• Assess control effectiveness and support compliance with applicable U.S. federal and privacy regulations.
• Partner with cross-functional teams to manage compliance requirements and drive security improvements.
• Develop reports, dashboards, and presentations for senior leadership.
• Support security awareness programs, including training, phishing simulations, and e-learning.
• Track training effectiveness and recommend continuous improvements.

Conocimientos

GRC experience

ISO knowledge

Compliance testing

Risk assessments

Communication skills

Cross-functional collaboration

Cloud security basics

Privacy regulations

Herramientas

RSA Archer

Microsoft 365

AWS

Azure

GCP

Descripción del empleo

Recruithook is seeking an experienced Governance, Risk & Compliance (GRC) professional in New Jersey to support information security, compliance, risk management, and reporting initiatives. This role helps strengthen the organization’s security and compliance programs while collaborating across teams to promote a security-first culture.

The ideal candidate has 5–8 years in GRC or related fields, deep knowledge of US privacy and cybersecurity requirements, and hands-on experience with controls,