GRC Analyst
TTM Technologies
Cyber Security
Salary
💰 $120,000 - $140,000 per year
Job Level
Senior
About the role
- Serve as a subject matter expert on security best practices, compliance frameworks and standards such as SOX Section 404 IT General Controls, ISO 27001, GDPR, CCPA.
- Maintain security documentation including, but not limited to: information security policies and procedures, risk assessment methodology and treatment plans, privacy and business impact assessments (BIA/PIA), and compliance audit procedures.
- Manage Serve’s security awareness program platform and quarterly phishing simulation campaigns and reporting.
- Conduct periodic risk assessments of third-party vendor services and establish corrective action plans for risk mitigation.
- Support periodic IT audits for Serve critical business systems to ensure compliance with IT General control (ITGC) requirements.
- Track and manage audit findings and remediation activities to ensure timely resolution.
- Manage Serve’s compliance framework, risk and control matrix and compliance automation system of record.
- Prepare weekly reports for senior leadership on the compliance status of internal controls.
Requirements
- Knowledge in ISO 27001/2 and SOC 2 trust principles.
- Knowledge in Information Security best practices.
- The following certifications are desired but not required: ISO/IEC 27001 Lead Implementer/Auditor, CISA, CISSP.
- Experience with participating in compliance audits in a lead or supporting role.
- Experience in preparing compliance audit workpapers such as artifact request lists, standard test cases and test plans.
- Experience with managing and supporting an Enterprise Risk Management (ERM) Lifecycle.
- Familiarity with the use of Standard Information Gathering (SIG) for Third-Party Vendor Risk Assessments.
- Experience using Atlassian Jira for team workload assignment and prioritization through Scrum or Kanban project management.
- Experience configuring, managing and providing support for GRC or IRM tools such as Archer, ZenGRC or RSAM, Vanta.
- Experience with developing compliance and security analytics/insights through Looker, PowerBI, Chartio or similar BI/analytics tooling.
- Ability to work effectively while prioritizing and juggling competing priorities in a fast-paced work environment.
