Governance, Risk and Compliance Analyst, Iru

• Three (3) years or more of relevant experience in risk-based technology compliance management programs, or Auditing experience
• Experience in performing risk-based testing for control compliance, including the identification, assessment, and mitigation of compliance issues: understanding how to balance the company's risk appetite to compliance needs/requirements
• Detailed knowledge and experience with technology controls across a variety of industry frameworks and how to assess controls supporting compliance for SOC2, FedRamp, CMMC, ISO 27001, and Privacy
• Detailed knowledge of information security, technology compliance management industry frameworks and standards: NIST, OWASP, SANS, ISO-27001/2, SANS, and/or Cobit
• Experience developing dynamic approaches to the implementation of a technology compliance program utilizing a variety of testing methods, both manual and automated, to provide qualitative and quantitative results where applicable
• Strong analytical and problem-solving skills
• Excellent written and verbal communication skills
• Ability to manage multiple priorities and deadlines
• Required to work on-site 3 days a week (Tuesday, Wednesday, Thursday). Managers may require additional on-site days

Desirable

• This opportunity provides the ability to work with various teams to evaluate controls, perform control testing to improve the efficiency and effectiveness of the internal control programs
• You will facilitate risk assessments and control reviews to accommodate new business areas as well as changes in processes
• The GRC Analyst will report to the VP, Security and Trust and work collaboratively with other departments
• In support of multiple frameworks (e.g. ISO27001, SOC2) plan, design and execute controls testing, controls assessment and risk management across all domains for IT General Controls and other GRC requirements, as appropriate
• Conduct risk assessments against products, features, datasets, applications, and Third Party Risk Management (TPRM)
• Partner to evaluate the design and effectiveness of the technical and operational control environment
• Execute compliance programs that facilitate growth and maturity of controls across Kandji
• Provide direction and guidance in pre-implementation reviews of new systems and services to ensure proper controls are implemented and executed to meet compliance
• Validate information security key controls to identify control risks, analyze root causes and trends in potential control weaknesses; suggest new controls to meet GRC standards where applicable
• Be a trusted advisor for in scope internal and external audits to expedite reviews and mitigate operational impacts
• Execute strategies for ensuring organizational compliance with SOC2, GDPR, Data Privacy, federal, state, and local government compliance, or similar regulations
• Assist with the preparation of reports and presentations for management and regulatory agencies
• Assist in the development and implementation of compliance training and awareness programs