Analyst - vGRC (virtual Governance, Risk, and Compliance)at Tevora
Irvine, CA, or Fairfax, VA
What's the role?Tevora is seeking a passionate Information Security Consultant who has a solid balance between business acumen and technical expertise. Comfortable across various disciplines of information security, this analyst consultant will be responsible for supporting clients in a variety of roles, such as Governance, Risk, and Compliance (GRC) programs, audit support, policy and procedure development, and advising on InfoSec best practices.
A day in the life could include:- Directly support clients in a variety of roles, such as Governance, Risk, and Compliance (GRC) programs, audit support, policy and procedure development, and advising on Information Security best practices.
- Drive successful completion of Sarbanes-Oxley (SOX) audits as part of Client's GRC team, focused on the ITGCs.
- Coordinating and managing Clients regarding internal or external audits, including:
- Control compliance review
- Evidence collection
- Coordination of audit work
- Leading or supporting compliance and risk assessments, including providing guidance to junior resources
- Conducting interviews with clients to analyze their information security controls or risk and identify recommendations
- Execute on multiple client engagements simultaneously
- Communicating with project stakeholders to effectively convey requirements of technical and process improvements.
- Assisting in the development of customized policies, procedures, controls, disaster recovery plans and other documentation for applications, systems, and infrastructure.
- Working with cross functional teams to provide InfoSec compliance support, and maintaining communicating across groups
- Additional duties as assigned
Necessary skills and qualifications:- Direct experience with ITGCs of SOX, including either externa or internal audit role
- Connect easily with clients and colleagues to communicate effectively across business and technical boundaries- to offer recommendations as an expert with best practices.
- Work independently without detailed guidance, including anticipating next steps and problem solving
- Understanding and predicting customer and project needs
- Ability to balance various project timelines and prioritize differing client needs
- Be proficient in writing executive level reports and technical documentation.
- Have comprehensive knowledge of common IT and security concepts, with a strong desire to expand knowledge base
- At least one Accounting, Risk or IT certification held or in process (i.e., CPA, CISSP, CISA, CISM, CRISC).
- Bachelor's Degree from an accredited 4-year university
- Minimum 3 years of experience in the information security, information technology, business consulting, enterprise risk or compliance field.
- Direct experience with at least one of the following compliance frameworks in addition to SOX: ISO 27001, SOC 2, SOC 1, SOX, or PCI-DSS
Bonus Points:- Demonstrated experience as an Information Security Compliance Auditor
- At least 2 years experience in client-facing role (e.g., consulting or external auditor)
Additional requirements:- Eligibility to work in the United States.
- Must be available to work a hybrid schedule at our Irvine, CA office.
We've got you covered!- Comprehensive benefits offering
- Group Medical, Dental, and Vision, Life insurance, and FSA options
- Paid time off and holidays
- 401k with Company match
- Vibrant work culture
$94,500 - $105,000 a year
