OverviewLifeway is seeking an
IT Security Analyst - GRC to guide day-to-day IT security governance, risk management, and compliance across the organization. You'll support third-party risk assessments, PCI compliance efforts, and internal risk reviews that help protect customer and ministry data.
This is a remote position in the U.S. with occasional travel to Nashville for in-person team gatherings. #LI-Remote
Responsibilities- Lives out Lifeway's mission and values, showing deep commitment to Kingdom work
- Limited travel: 2-4 times per year, typically overnight
- Support third-party risk management (TPRM) assessments and maintain the overall TPRM program
- Put security systems and programs in place to manage vulnerabilities
- Use industry frameworks to support governance and risk management across technology systems and processes
- Support IT compliance and risk assessments, including PCI scans, assessments, remediation, and Right to Be Forgotten requests
- Perform internal risk assessments to confirm Lifeway's practices are secure and meet PCI and other standards and regulations
- Contribute to developing and maintaining security policies, standards, and procedures
- Collaborate with internal and external departments on projects
QualificationsEducationBachelor's degree in computer science, cybersecurity, information technology, or a related field, required
Master's degree in computer science, cybersecurity, information technology, or a related field, preferred
Advanced graduate degree (PhD, etc.), not required
Skills, Knowledge, & Experiences, required- Ability to travel to the Middle Tennessee area 2-4 times annually for team gatherings
- 3-5 years of IT risk, audit or compliance experience
- 1-2 years of experience performing assessments and/or audits, and identifying and addressing security control gaps, abnormal behavior patterns, and attack techniques
- Working knowledge of risk assessment and IT auditing methods
- Working knowledge of security frameworks (NIST-CSF, PCI-DSS, MITRE, OWASP)
- General knowledge of security domains and cloud security concepts, and familiarity with vulnerability assessment tools
Actively involved in an evangelical Christian church
Skills, Knowledge, & Experiences, preferred - Security+ or CISSP certification
- CISA or CISM certification
- GIAC, CCSK, or CCSP certification
