Job title: IT GRC Analyst

Location: Dallas, TX - onsite

Job Overview

As a Risk and Governance Analyst, you will play a vital role in ensuring the confidentiality, integrity, and availability of our organizations information assets. You will be responsible for identifying, assessing, and managing information security risks, as well as implementing and maintaining governance frameworks to support the organization's cybersecurity objectives.

Responsibilities

Conduct comprehensive risk assessments to identify potential vulnerabilities and threats to the organizations information systems and data.
Develop and implement risk mitigation strategies and controls to address identified risks and ensure compliance with security standards and regulations.
Establish and maintain information security governance frameworks, policies, and procedures to guide the organization in managing and protecting sensitive information.
Assist in developing and maintaining incident response plans to effectively respond to and recover from information security incidents.
Promote security awareness and best practices among employees through training programs and communication initiatives.
Evaluate and recommend security tools and technologies to enhance the organization's security posture and incident detection capabilities.
Prepare reports and analysis on information security risks, incidents, and compliance status for management and stakeholders.
Work collaboratively with cross-functional teams, including IT, legal, compliance, and business units, to address security risk and governance issues.
Identify opportunities for continuous improvement in information security risk management processes and practices.

Qualifications

Bachelor’s degree in information security, Computer Science, related field or equivalent experience.
Certified Risk and Information Systems Control (CRISC), CompTIA Security+, or equivalent certification is preferred.
Proven experience in information security risk assessment, governance, and compliance.
Strong knowledge of industry standards and frameworks such as ISO 27001, NIST, and HiTrust.
Excellent analytical, problem-solving, and communication skills.
Ability to work independently and collaboratively in a fast-paced environment.
Attention to detail and a strong commitment to maintaining the confidentiality and integrity of information assets.

BuzzClan jobs

GRC Analyst