Senior GRC & ISMS Security Analyst

VITS Consulting Corp; Minneapolis (MN); On-site; USD 120,000 - 150,000; Full time

Job summary

VITS Consulting Corp is seeking a Senior GRC Information Security Systems Analyst to join our Information Security team in a direct hire role. The position supports governance, risk, and compliance initiatives, with emphasis on ISMS, audits, and security governance across multiple office locations.

The ideal candidate will have extensive ISMS experience, familiarity with ISO 27001, SOC 2, GDPR, NIST CSF, and NIST 800-53, plus strong stakeholder communication.

Qualifications

• Bachelor's degree in a related field or equivalent experience.
• 7+ years of Information Security, Cybersecurity, or GRC experience.
• Experience implementing or maintaining an ISMS.
• Experience with ISO 27001:2022, SOC 2, GDPR, NIST CSF, NIST 800-53.
• Experience developing and maintaining security policies, standards, procedures, and controls.
• Experience conducting security audits, compliance assessments, and vendor security reviews.
• Strong written and verbal communication, organization, and PM skills.

Responsibilities

• Lead Governance, Risk, and Compliance initiatives and audits.
• Maintain ISMS, policies, standards, and documentation.
• Coordinate internal and external security audits and assessments.
• Manage risk registers and report to leadership.
• Collaborate with IT, Compliance, Risk, and business teams.
• Support awareness programs and security governance improvements.

Skills

GRC

ISMS

Security governance

Audit readiness

Regulatory compliance

Risk assessments

Vendor security

IAM

DLP

Security metrics

Education

Bachelor's degree in Computer Science/Information Security

Tools

Azure

Microsoft 365

Active Directory

Microsoft Entra ID

Microsoft Defender

Microsoft Sentinel

OAuth

SSO

PIM

Job description

VITS Consulting Corp is seeking a Senior GRC Information Security Systems Analyst to join our Information Security team in a direct hire role. The position supports governance, risk, and compliance initiatives, with emphasis on ISMS, audits, and security governance across multiple office locations.

The ideal candidate will have extensive ISMS experience, familiarity with ISO 27001, SOC 2, GDPR, NIST CSF, and NIST 800-53, plus strong stakeholder communication.