Cybersecurity Business Analyst, Vantage Data Centers

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field or equivalent years of experience
• CISA, CISM, ISO 27001 Lead implementer, 27001 lead auditor certifications preferred but not required
• Minimum three (3) years of experience in governance, risk and compliance
• Demonstrated experience in enterprise risk management with solid understanding of cyber threats, vulnerabilities, probability, and impact
• Experience with IT GRC platforms
• Experience with IT governance, risk, and compliance management in a complex global environment
• Experience with scripting and automation (e.g., Python, PowerShell), preferred
• Ability to excel in a fast paced and constantly evolving environment
• Familiarity with regulatory requirements and frameworks (e.g., GDPR, COBIT, NIST)
• Understanding of cloud security principles and technologies (e.g., AWS, Azure, Google Cloud)
• Familiarity with ISMS and security frameworks, particularly ISO 27001/27002 and NIST RMF
• Strong understanding of fundamental information security concepts and technology
• Proficiency in written and oral communications across multiple stakeholder groups ranging from junior staff to senior leaders
• Strong background in process development, documentation, and continuous improvement
• Experience developing Standard Operating Procedures (SOPs), job aids, and hands-on training materials
• Travel required is expected to be up to 15% but may increase over time as the business evolves

Desirable

• The Cybersecurity Business Analyst plays a critical role in supporting the organization’s information security management system (ISMS) and cybersecurity initiatives.
• This position is responsible for leading the ISMS risk register, providing oversight on cyber risks and controls, and ensuring that the company’s security environment is maintained and aligned with relevant standards!
• The GRC Analyst will engage in ongoing training and professional development to stay ahead of the latest security trends and technologies, while also supporting internal and external audits, conducting security investigations, and handling GRC programs and projects!
• Risk Management & ISMS Support:
• Lead the ISMS risk register, ensuring that risks are identified, assessed, and mitigated effectively
• Provide oversight on cyber risks and the implementation of appropriate controls
• Support the ISMS program by ensuring compliance with relevant standards and conducting periodic gap assessments
• Cybersecurity Oversight:
• Manage, support, and maintain Vantage’s security environment
• Act as a contact for end users and individuals reporting cybersecurity issues, questions, or concerns
• Support AI Initiatives and governance
• GRC Program & Project Management:
• Manage GRC programs and projects as assigned, ensuring that objectives are met and risks are mitigated
• Maintain and run policies, procedures, standards, and the Confluence site for all documentation, ensuring accuracy and conducting annual reviews
• Audit Support & Compliance:
• Support internal and external audits by providing vital documentation and responding to audit inquiries
• Perform periodic gap assessments to validate compliance on an ongoing basis
• Incident Response & Triage:
• Support triage and investigation of security alerts to identify potential threats and take appropriate action
• Participate and support the Business Impact Analysis (BIA) and Crisis Management Framework (CMF) Documentation
• Documentation & Communication:
• Create documentation and presentations for leadership and partners on relevant topics and issues
• Contribute to the development and refinement of SOC (Security Operations Center) policies, procedures, and best practices
• Professional Development:
• Engage in ongoing training and professional development to stay ahead of the latest cybersecurity threats, vulnerabilities, trends and technologies
• Additional Duties:
• Handle additional duties as assigned by Management