Bachelor’s degree in Information Systems, Information Security, Risk Management, Cybersecurity, or related discipline; equivalent experience accepted.
4–7 years of experience in information security, GRC, risk management, compliance, or related IT security roles.
Proven experience in supporting security audits, including evidence collection and remediation tracking.
Experience in assessing information security risks and evaluating control effectiveness.
Knowledge of security frameworks and regulatory standards such as NIST, ISO 27001, and PCI-DSS.
Strong analytical, problem-solving, and organizational skills.
Ability to communicate technical security concepts to non-technical stakeholders.
Responsibilities
Independently assess and document information security risks across systems and applications.
Support the information security governance framework including policies and procedures.
Assess security controls and provide risk-based recommendations to leadership.
Monitor adherence to internal security policies and regulatory requirements.
Identify, track, and report control deficiencies and partner with stakeholders on corrective actions.
Support audits and regulatory examinations including evidence coordination and remediation tracking.
Develop and maintain a centralized security knowledge base.
Benefits
Hybrid work schedule with three days in the Fort Worth office.
Opportunity to work in a fast-paced, collaborative environment.
Contribution to continuous improvement of GRC processes and tools.
Full Job Description
The Senior GRC Analyst is an experienced individual contributor within the IT Security function responsible for advancing Amynta’s governance, risk management, and compliance (GRC) program. This role independently executes information security risk assessments, control oversight, and support for regulatory, audit, and customer assurance requirements.
Hybrid schedule with 3 days in Fort Worth, TX office on a set schedule.
What You Will Do
Independently assess, analyze, and document information security risks across systems, applications, and technology‑enabled processes using a risk‑based approach.
Support and maintain the information security governance framework, including policies, standards, procedures, and control documentation.
Assess the design and operating effectiveness of security controls and provide risk‑based recommendations to Information Security leadership.
Monitor and report on adherence to internal security policies and applicable regulatory and contractual requirements.
Identify, track, and report control deficiencies and policy violations; partner with stakeholders to drive corrective actions.
Support internal and external audits, regulatory examinations, and customer assurance activities, including evidence coordination, audit responses, and remediation tracking.
Provide governance and coordination support for SOC 2 Type 2 assurance activities, including control readiness, internal testing, and auditor engagement.
Develop and maintain a centralized security knowledge base to streamline customer, partner, and due‑diligence responses.
Execute security awareness and training activities, including platform administration and phishing simulations.
Partner with IT, Legal, and business stakeholders to ensure security requirements are understood and incorporated into relevant processes.
Support the development and implementation of the IT vendor risk management program, including third‑party risk assessments and vendor risk tracking.
Contribute to continuous improvement of GRC processes, tooling, and reporting.
Perform other duties consistent with the scope of the role.
About You
Must reside within a reasonable commuting distance of the Fort Worth office.
Bachelor’s degree in Information Systems, Information Security, Risk Management, Cybersecurity, or a related discipline; equivalent practical experience may be considered.
4–7 years of progressively responsible experience in information security, governance, risk and compliance (GRC), risk management, compliance, audit, or related IT security functions.
Proven experience supporting security, IT, or compliance audits (e.g., SOC, ISO, internal audit, regulatory examinations), including audit readiness, evidence collection, and remediation tracking.
Experience assessing information security risks, evaluating control effectiveness, and identifying compliance gaps.
Working knowledge of common security frameworks and regulatory standards such as NIST, ISO 27001, SOC, NYDFS Part 500, PCI-DSS, or similar frameworks.
Strong analytical, problem-solving, and organizational skills with the ability to manage multiple priorities independently.
Ability to communicate technical security concepts clearly to non-technical stakeholders and business leaders.
Excellent written and verbal communication skills, including clear and concise documentation.
Ability to work independently in a fast-paced environment with strong attention to detail.
Sound professional judgment and discretion when handling sensitive or confidential information.
Collaborative mindset with the ability to influence cross-functional stakeholders without direct authority.
Professional certifications such as CISA, CRISC, CISSP, or ISO 27001 are preferred, but not required.
Legally authorized to work in the United States without current or future employer sponsorship.
About Amynta Group
Amynta Group is a leading insurance services provider, offering property and casualty insurance solutions to businesses and individuals. The company operates through three segments: Specialty Equipment Insurance, Warranty and Protection Services, and Managing General Agency. The Specialty Equipment Insurance segment provides insurance coverage for equipment and commercial vehicles, while the Warranty and Protection Services segment offers extended warranty and protection services for consumer products. The Managing General Agency segment provides underwriting and claims management services for insurance companies. Amynta Group has operations in North America, Europe, and Australia, and serves customers in a variety of industries, including construction, transportation, and retail.
