Job Description
The Security Governance Analyst is responsible for designing, implementing, and monitoring security governance frameworks, conducting risk assessments, and ensuring compliance with internal policies, industry standards, and applicable laws. This role bridges technical security teams, business units, and compliance functions
Job Summary:
Independently executes complex governance and risk assessments and drives comprehensive evaluation of control effectiveness to ensure alignment with enterprise policies and applicable regulatory and contractual requirements across multiple business units.
Key Responsibilities:
Leads enterprise and third-party risk assessments of moderate to high complexity across multiple systems and vendors.
Conducts detailed evaluations of governance, privacy, and access controls and provides formal remediation recommendations to stakeholders.
Assesses systems, vendors, and integrations for regulatory and contractual compliance impact and documents comprehensive control gap analysis.
Coordinates audit support activities and validates remediation evidence across multiple initiatives and stakeholders.
Performs and reviews access governance processes, control testing activities, and compliance documentation to ensure defensibility.
Develops comprehensive governance reporting insights to support executive risk visibility and compliance tracking.
Provides structured guidance and quality review support to governance analysts to ensure assessment rigor and consistency.
Education Qualifications:
Bachelor's degree in cybersecurity, information systems, business, law, or a related field required.
Work Experience:
4-6 years of experience in information security governance, compliance, or risk management required. Including independent leadership of complex assessments.
Certifications and Licenses:
Relevant certification preferred (e.g., Certified in Risk and Information Systems Control (CRISC), Certified Information Systems Security Professional (CISSP), Certified Cloud Security Professional (CCSP))
Successful completion of a background check is required.
