US CITIZENS / Green Card Holders / EAD Green Card Holders ONLY
NO THIRD PARTIES PLS
THIS IS A DIRECT CLIENT REQUIREMENT !
Those authorized to work without sponsorship are encouraged to apply please.
Reach Saakshi Sahni - 703-955-1070
Email: saakshi(at)zilliontechnologies(dot)com // 7039551070
Risk & Compliance Analyst / GRC Analyst
Location: 100% REMOTE
Duration: 3 Months Contract with Possible extension
$$ BEST RATES AVAIALBLE $$
Direct Banking client
Basic Purpose
The Contractor Analyst will be experienced in cybersecurity standards and frameworks, risk management, security control assessment, and Governance, Risk, and Compliance (GRC) tool operations (i.e. ServiceNow). The Analyst will understand how and why security standards apply to the business, and be able to articulate the need for controls. The Analyst will determine the residual risk of requests through assessment of inherent risk and effective controls. The Analyst will be responsible for supporting daily operations, including reviewing, assessing, and processing requests for Exceptions and Authorizations in alignment with Security Standards, enterprise risk appetite, and industry best practices. The Analyst will perform research, facilitate meetings, and aid business units in ensuring the completeness, accuracy, and validity of their respective requests. The Analyst will evaluate approved Exceptions and Authorizations as they come due for recertification.
Responsibilities
- Review, assess, and process Security Standard Exception requests based on residual risk, justification, and remediation plan.
- Review, assess, and process Security Authorization requests where business activities require approval in alignment with Security Standards.
- Assess all requests for completeness, accuracy, and validity using established review processes.
- Leverage various communications channels and conduct meetings with stakeholders to obtain required information.
- Support metrics and reporting around Exceptions and Authorizations processes.
- Seek out and share opportunities to introduce process efficiencies and enhancements.
- Aid business units in understanding and acting on Security Standard requirements.
- Keep current with Cybersecurity best practices and industry trends and apply these practices as appropriate.
- Perform other duties as assigned.
Qualifications
- Experience in the financial services industry, with a focus on cybersecurity compliance and risk assessment
- Experience in cybersecurity risks, processes, and controls
- Knowledge of applicable federal and state laws, rules, and regulations (i.e. Federal Financial Institutions Examination Manual (FFIEC), National Information of Standards and Technology (NIST), etc.)
- Knowledge of NCUA, FFIEC, GLBA, NIST (including the Cyber Security Framework and 800 Series), SANS/CIS 20, PCI DSS, and other Information Security requirements and frameworks
- Knowledge of data security controls and procedures including authentication, access, network security, event logging/monitoring, and encryption
- Effective planning and organizational skills
- Strong analytical, research, and problem-solving skills
- Strong verbal, written and interpersonal communication skills, including technical writing and a high level of confidence in dealing with executives in technical discussions
- Bachelors Degree in business, information systems, cyber security, or related field, or five years of equivalent work and/or military experience
- CISSP, CRISC, CISA, CCSP, or other industry Information Security certifications
Please send qualified resumes directly to : saakshi(at)zilliontechnologies(dot)com // 7039551070
Thanks,
Saakshi Sahni
Zillion Technologies Inc.
Director - Talent Acquisition
Email: saakshi(at)zilliontechnologies(dot)com // 703-955-1070