GRC Security Analyst - Robert Half - ref. c4178523

You will be responsible for leading the IT security risk and audit program using generally accepted standards and frameworks for IT audit and risk management. This is an onsite position and offers a long-term contract employment opportunity.

Responsibilities:

• Lead the IT security risk and audit program for information systems security
• Develop and implement the IT security risk and audit strategy
• Perform information systems and business process risk assessments
• Evaluate the effectiveness of technical, physical, and administrative controls to identify control weaknesses
• Interface with Security Operations, IT Operations, and various business units to perform PCI, SOC2, ISO, and applicable State of Florida cybersecurity controls-related reviews
• Plan and perform IT security controls effectiveness and manage remediation efforts for the identified gaps
• Maintain IT security risk and compliance matrix and perform management reporting
• Maintain the Third Party Risk Management Program (TPRM) and analyze SOC-2 and other reporting
• Manage IT security vulnerabilities management program aligned with PCI and NIST standards
• Coordinate, track, and verify remediation of audit findings
• Document the results and develop a plan of action and milestones for mitigating any identified risk
• Produce formal audit reports based on ISACA Audit Standards
• Promote compliance with regulatory requirements (e.g. PCI DSS) and IT best practices
• Must have proficiency in Documentation and Reporting
• Previous experience in Operations and Planning is necessary
• Familiarity with Procedures and Policy development
• Understanding of Compliance requirements within the IT Operations sector
• Ability to Design and Audit security systems
• Experience in Auditing and Security measures
• Knowledge of IT Security implementation and Best Practices
• Familiarity with Component Selection and Compliance Functions
• Experience in Risk Management and development of Frameworks
• Understanding of Recovery procedures and Onsite management
• Skills in Risk Mitigation and working with Business Units
• Knowledge of Cyber Security and Risk Assessment is crucial