Senior Analyst, Cyber Governance, Risk and Compliance (GRC)

About the role

Senior Cyber GRC Analyst on H.I.G. Capital's Information Security team (private equity firm). Role is designed for experienced professionals; covers control and policy development, framework mapping, audit evidence, access reviews, TPRM vendor assessments and cyber risk reporting.

Requirements

• Bachelor's degree in Information Security, Cybersecurity, Computer Science, MIS, Engineering or related technical discipline, or high school diploma and equivalent professional experience
• Demonstrated knowledge of information security principles including governance, risk management, compliance and control frameworks
• Familiarity with NIST, ISO 27001, CIS Controls
• Experience or exposure to security governance, regulatory compliance, risk assessments, third-party risk management or security program operations
• Strong analytical, written and verbal communication skills
• Ability to manage multiple tasks and deadlines; accountability and ownership
• Role designed for experienced professionals (no explicit years stated)

What you'll do

• Evaluate and enhance security controls, policies, standards and procedures
• Map controls to NIST CSF, ISO 27001, CIS Controls and financial regulatory requirements
• Support internal and external audits and collect control evidence
• Run quarterly access reviews and control validation
• Perform third-party vendor risk assessments
• Track cyber risks in a risk monitoring platform
• Prepare cyber risk reporting and metrics
• Support cybersecurity awareness program

Where this was posted

• Hiring Cafe

  last seen 2h ago
  View on Hiring Cafe