The Information Security Governance, Risk & Compliance Analyst II will ensure information technology processes meet defined security controls and perform vulnerability analyses and risk assessments against the adequacy of those security controls. They will facilitate and manage risk-based control remediation activities.

• Leads internal and external security reviews, audits, and controls evaluations.

• Prepares security awareness training and phishing campaigns to enable a security aware organization

• Provides guidance and training for and mentors junior staff.

• Identify gaps in security design or controls and implement recommendations for remediation or mitigating controls.

• Supports the development, and report on security metrics.

• Performs vendor information security assessments.

• Ensure alignment of information security controls and processes with industry standards.

• Lead IT Risk Assessment projects.

• Perform ongoing monitoring of third-party vendors.

• Collaborate with various key stakeholders to gain a common understanding of identified deficiencies/gap.

• Analyze compliance requirements

Applicable Experience: