Information Security GRC Analyst

Managing day-to-day and long-term information security risks, the full-time remote Information Security GRC Analyst III will ensure compliance with risk management policies, measure and report on security risks, and engage with vendors to develop risk mitigation plans. Key responsibilities Measure, monitor, and report on information security risks Review vendor/third-party risks to support vendor risk management activities Engage employees and vendors in developing and executing information security risk mitigation plans Required qualifications Bachelor's Degree or equivalent years of relevant work experience Minimum of seven (7) years of relevant work experience Certified in Risk and Information System Control (CRISC) or System Security Certified Practitioner (SSCP) preferred CISSP preferred Working technical knowledge/experience in IT Audit, application, server, and network security