Communicate project requirements and improvements to stakeholders.
Benefits
Comprehensive medical, dental, and vision insurance.
Life insurance and flexible spending account (FSA) options.
Paid time off and holidays.
401k plan with company match.
Vibrant work culture.
Full Job Description
Analyst - vGRC (virtual Governance, Risk, and Compliance)
at Tevora
Irvine, CA, or Fairfax, VA
What's the role?
Tevora is seeking a passionate Information Security Consultant who has a solid balance between business acumen and technical expertise. Comfortable across various disciplines of information security, this analyst consultant will be responsible for supporting clients in a variety of roles, such as Governance, Risk, and Compliance (GRC) programs, audit support, policy and procedure development, and advising on InfoSec best practices.
A day in the life could include:
Directly support clients in a variety of roles, such as Governance, Risk, and Compliance (GRC) programs, audit support, policy and procedure development, and advising on Information Security best practices.
Drive successful completion of Sarbanes-Oxley (SOX) audits as part of Client's GRC team, focused on the ITGCs.
Coordinating and managing Clients regarding internal or external audits, including:
Control compliance review
Evidence collection
Coordination of audit work
Leading or supporting compliance and risk assessments, including providing guidance to junior resources
Conducting interviews with clients to analyze their information security controls or risk and identify recommendations
Execute on multiple client engagements simultaneously
Communicating with project stakeholders to effectively convey requirements of technical and process improvements.
Assisting in the development of customized policies, procedures, controls, disaster recovery plans and other documentation for applications, systems, and infrastructure.
Working with cross functional teams to provide InfoSec compliance support, and maintaining communicating across groups
Additional duties as assigned
Necessary skills and qualifications:
Direct experience with ITGCs of SOX, including either externa or internal audit role
Connect easily with clients and colleagues to communicate effectively across business and technical boundaries- to offer recommendations as an expert with best practices.
Work independently without detailed guidance, including anticipating next steps and problem solving
Understanding and predicting customer and project needs
Ability to balance various project timelines and prioritize differing client needs
Be proficient in writing executive level reports and technical documentation.
Have comprehensive knowledge of common IT and security concepts, with a strong desire to expand knowledge base
At least one Accounting, Risk or IT certification held or in process (i.e., CPA, CISSP, CISA, CISM, CRISC).
Bachelor's Degree from an accredited 4-year university
Minimum 3 years of experience in the information security, information technology, business consulting, enterprise risk or compliance field.
Direct experience with at least one of the following compliance frameworks in addition to SOX: ISO 27001, SOC 2, SOC 1, SOX, or PCI-DSS
Bonus Points:
Demonstrated experience as an Information Security Compliance Auditor
At least 2 years experience in client-facing role (e.g., consulting or external auditor)
Additional requirements:
Eligibility to work in the United States.
Must be available to work a hybrid schedule at our Irvine, CA office.
We've got you covered!
Comprehensive benefits offering
Group Medical, Dental, and Vision, Life insurance, and FSA options
