DOT Sr Business GRC Analyst

Our client is actively hiring a DOT Sr Business GRC Analyst (Governance, Risk, and Compliance (GRC) Analyst)! Join a great team of cyber security professionals and help us deliver our mission – which is to protect the confidentiality, integrity, and availability of the companies digital information and systems.

DOT Sr Business GRC Analyst is a key pillar of the department Information Security program, responsible for the alignment of IT activities to business goals and the management of information security risks. In the next chapter of our GRC program, we will be expanding our implementation and tracking of security safeguards across the organization. We need your help!

Requirements

Sample Duties and Responsibilities:

• Ability to read, comprehend, and analyze published:
  • laws and regulations, security policies and standards, and information sharing agreements.
  • leading security frameworks such as the National Institute of Standards and Technology (NIST) SP 800-53 Security and Privacy Controls for Information Systems and Organizations.
  • security requirements of the Payment Card Industry Data Security Standard and the maintenance of effective controls in our retail networks.
• Contribute to the continuous improvement of the InfoSec GRC function
• Actively participate in risk assessments with the team and facilitate the implementation of security safeguards across IT.
• Develop tracking for ongoing risk mitigation work and the maintenance of security safeguards.

Required

• Two plus (2+) years of training or practical experience in IT Operations
• Two plus (2+) years of training or practical experience in Information Security Risk Management
• Strong work ethic, great time management, and highly inclusive team player
• Effective verbal and written communicator
• Authorization to work indefinitely in the U.S.

Preferred:

• Bachelor's degree or equivalent in Cyber/Information Security
• Industry certifications such as CISSP
• Previous experience on a GRC team in a large organization