Hybrid Senior Information Security Governance Analyst

Posted last month

Apply now

About the role

  • Develop, implement, and maintain a comprehensive cybersecurity governance framework to ensure compliance with industry standards and align with the organization's security and risk management objectives
  • Develop, publish, and maintain cybersecurity Policies, Standards, Guidelines, and SOPs that are practical, enforceable, and aligned with leading practices
  • Lead multiple cybersecurity governance initiatives concurrently, ensuring alignment with objectives, and timelines and delivering expected outcomes
  • Collaborate with cross-functional teams and internal stakeholders to ensure cybersecurity policies, standards, and procedures comply with relevant local and global laws, regulations, and industry standards
  • Monitor policy adherence across the organization and address non-compliance issues promptly
  • Manage and collaborate to execute cybersecurity awareness campaigns to educate employees about potential threats and promote a culture of cybersecurity in the organization
  • Provide guidance and support to business units on cybersecurity governance matters, including security awareness training
  • Measure the effectiveness of awareness campaigns and continuously improve engagement through innovative communication strategies
  • Coordinate and support internal and external cybersecurity audits and assessments, ensuring compliance with established controls and best practices, and accurate and timely responses to audit findings and recommendations
  • Maintain the strategy to support customer audits and update a centralized repository of security documentation, assessments, audit reports, and standard responses to streamline customer engagements
  • Develop and deliver accurate, comprehensive responses to customer RFIs, RFQs, and RFPs related to cybersecurity and data protection
  • Liaise with internal and external auditors and regulatory bodies to facilitate audits and ensure successful outcomes
  • Coordinate audit responses and address findings or recommendations in a timely and effective manner to improve and meet customer satisfaction

Requirements

  • Bachelor’s degree in computer science, Information Security, Communication or a related field
  • Relevant certifications such as PMP, CRISC, and CISA are desirable
  • Minimum 5 years’ experience in cybersecurity governance , with a proven track record of successfully managing complex projects and initiatives
  • Knowledge in developing and governing cybersecurity policy frameworks
  • Good understanding of cybersecurity principles, practices, and technologies, with previous experience in cybersecurity governance desirable
  • Excellent communication and interpersonal skills, with the ability to effectively collaborate with cross-functional teams and communicate complex cybersecurity concepts to non-technical stakeholders
  • Strong analytical and problem-solving skills, with the ability to assess risks and develop effective mitigation strategies
  • Knowledge of cybersecurity frameworks and standards such as HIPAA, GDPR, NIST, ISO 27001, HITRUST, and FDA regulations
  • Ability to work independently as well as collaboratively in a team environment, prioritize tasks, and manage time effectively

Benefits

  • Health benefits to include Medical, Dental and Vision
  • Company match 401k
  • Eligibility to participate in Employee Stock Purchase Plan
  • Eligibility to earn commissions/bonus based on company and individual performance
  • Flexible paid time off (PTO) and sick time

Job title

Senior Information Security Governance Analyst

Job type

Experience level

Senior

Salary

$86,000 - $145,000 per year

Degree requirement

Bachelor's Degree

Location requirements

Report this job

See something inaccurate? Let us know and we'll update the listing.

Report job