Jr. Security & Grc Analyst

InfoSight^®

Jr. Security & GRC Analyst

InfoSight^® is looking for a Jr. Security & GRC Analyst to work with its Advisory Department’sGovernance, Risk, and Compliance Team.The successful candidate will assist the team lead to complete various tasks and deliverables within the GRC and vISO (virtual Information Security Officer) areas.

Responsibilities:

• Work with clients who must adhere to various regulations and frameworks to mitigate cyber risk and threats.
• Actively expand consulting skills and professional development through mentoring, training courses, daily interaction with clients, and assigned developmental materials.
• Completion and accuracy of assigned work tasks and deliverables.
• Finding, recommending, and utilizing out of the box and innovative approaches to complete assigned tasks, deliverables, and improve processes/procedures.
• Participate in team/client problem solving efforts and offer ideas and solutions for resolution.
• Assist in the completion of various framework risk assessments and compliance reviews.
• Using information security tools, conduct relevant research and data analysis to create deliverables as assigned (reports, presentations, statements of work, policies, etc.).
• Identify risks through detailed security control assessments.

Qualifications:

Required:

• Ability to obtain and maintain the required clearance for this role.
• Ability to travel when required.
• Demonstrated ability to write clearly, succinctly, and in a manner that appeals to a wide audience.
• Proficiency in Word, Excel, and PowerPoint creation tools, as well as other applications.
• Ability to effectively prioritize workload to meet deadlines and work objectives.
• General knowledge of information security and cybersecurity topics.
• Knowledge of risk management and assessment principles.
• At least one certification in: information systems security, cybersecurity, IT auditing, or a related field such as: CISA, CISM, CBCM, CISSP.
• Bachelor’s Degree in Computer Technology or equivalent work experience.

Preferred:

• Experience with Information Assurance concepts and processes within the Federal government.
• Knowledge of and experience with Federal security regulations, standards, and processes including FFIEC, HIPAA, NIST and CIP.
• Multiple certifications in; information systems security, cybersecurity, IT auditing, or a related field such as: CISA, CISM, CBCM, CISSP.