Sr. Analyst - Information Security Governance, Risk & Compliance
Genesys
Fully remote
5+ years information security governance experience
Experience with sox pci hipaa soc1/2 audits
Proficiency in risk assessment methodology
Genesys is seeking a Sr. Analyst for Information Security Governance, Risk & Compliance, who will be responsible for managing compliance programs, conducting audits, and advising on security controls. The role is fully remote and requires extensive experience in information security and compliance, as well as strong communication and project management skills
Job Summary
The Information Security GRC Analyst will play a key role in managing a compliance program for a portfolio of internal and external audits and certifications.
This position requires assisting control owners in defining responsibilities and control standards for regulatory goals including SOX, PCI, HIPAA, and ISO 27001.
Genesys offers employees the independence to make a larger impact on the company while providing great benefits and perks similar to larger tech companies.
Matching Summary
Match Score: 85
Genesys is seeking a Sr. Analyst for Information Security Governance, Risk & Compliance, who will be responsible for managing compliance programs, conducting audits, and advising on security controls. The role is fully remote and requires extensive experience in information security and compliance, as well as strong communication and project management skills.
Skills & Requirements
Must-have
5+ years information security governance experience
Experience with SOX PCI HIPAA SOC1/2 audits
Proficiency in risk assessment methodology
Ability to work EST hours 8am-5pm
Cross-functional team collaboration skills
Nice-to-have
Agile methodologies promotion
Automation of compliance processes
Strong communication with non-technical staff
High level of personal integrity
Project management facilitation skills
Key Requirements
Bachelor's Degree in Computer Science or equivalent
5+ years experience in information systems auditing
ISO LA, PCI QSA, CISSP, CISM, CISA, ITIL, or GIAC certifications desired