Senior IT Security & GRC Analyst - Risk & Compliance

Prosum; Irvine (CA); Híbrido; USD 125 000 - 135 000; Tempo integral

Resumo da oferta

Prosum in Irvine, CA is seeking a hands-on Sr. Analyst to lead IT security, risk, and compliance. The role requires owning the day-to-day IT security and GRC program, maintaining ISMS controls and risk registers, and coordinating audits and remediation efforts.

You will work with stakeholders, vendors, and a global parent organization to mature a cloud-based security program. Strong governance, documentation, and ownership are essential for success.

Qualificações

• 5+ years of IT Security, GRC, or related experience.
• Hands-on with security controls, audits, risk assessments, remediation.
• Familiarity with ISO 27001, NIST, SOC 2 or SOX ITGC.

Responsabilidades

• Own day-to-day operation of the IT security and GRC program.
• Maintain ISMS, security controls, risk register, and control calendar.
• Coordinate control testing, access reviews, and audit readiness.
• Investigate security incidents and coordinate vulnerability remediation.
• Develop and maintain security policies, SOPs, and documentation.

Conhecimentos

IT Security

GRC

Audit & Compliance

ISO 27001

NIST/SOC 2/SOX ITGC

Microsoft 365

IAM / Entra ID

Cloud Security

Incident Response

Formação académica

Bachelor's degree in CS/IS

Ferramentas

Azure AD

Office 365

Risk Management Tools

Descrição da oferta de emprego

Prosum in Irvine, CA is seeking a hands-on Sr. Analyst to lead IT security, risk, and compliance. The role requires owning the day-to-day IT security and GRC program, maintaining ISMS controls and risk registers, and coordinating audits and remediation efforts.

You will work with stakeholders, vendors, and a global parent organization to mature a cloud-based security program. Strong governance, documentation, and ownership are essential for success.