US Salary: $100,000 - $120,000
About the RoleThe Bonterra Information Security Risk and Compliance department is looking to hire a Senior Information Security Risk Analyst to our team. If you enjoy problem solving, are enthusiastic working in a team format and want to thrive in the ever-changing risk & compliance field while learning new concepts and principles as part of your continuing education, look no further!
Job Responsibilities:
Prepares for and facilitates examinations by qualified security assessors for frameworks such as SOC, ISO 27001, and PCI-DSS.
Works closely with other members of the Information Security, Risk, & Compliance team.
Gathers and synthesizes data; presents conclusions; and offers risk mitigation, remediation and process improvement solutions to management.
Works closely with control owners across the company and internal and external auditors to ensure requests are completed in a timely manner.
Identifies potential business risks, operational and regulatory process deficiencies and improvement opportunities.
Communicates risk findings and recommendations that are clear and actionable to all stakeholders.
Performs technical risk assessments of third party suppliers' security and privacy controls.
Maintains register of relevant suppliers/vendors, controls, and risks for ongoing vendor risk management activities.
Assists in the initial triage of compliance, risk and security requests in the ticket management system to ensure efficiency and prioritization.
Assists in maintaining our overall security awareness, role-based security trainings and phishing simulation programs across the enterprise.
Assists in conducting user activity audits where required.
Desired Background
6+ years’ experience performing risk and compliance activities or open to less years with addition of relevant course work/degrees
Experience managing multiple priorities independently and in a team environment to achieve goals.
Excellent organizational, planning and time management skills.
Excellent research and analytical skills.
Excellent verbal and written communication skills.
Ability to exercise good judgement and tact in dealing with Bonterra senior management.
Proficient with technology and ability to learn our software systems, including GRC, ticketing and project management software and workflows.
Proven track record of proactively identifying needs and implementing solutions.
May hold one or more information systems security professional certifications (CRISC, CISA, CISSP, CISM, GSEC, GCFA, GCTI, CCSP, or other relevant Information Security certifications).
At Bonterra, we’re building AI-powered tools to solve real human challenges—and we want teammates who share that enthusiasm. We value people who will champion AI and bring diverse perspectives from different industries, backgrounds, and cultures. Together, we create AI that breaks down barriers, empowers communities, and delivers better outcomes
At this time, we are unable to consider candidates who require current or future sponsorship for employment authorization.
____________________________________________________________________________________
Compensation & BenefitsWe offer a comprehensive benefits package that supports your health, well-being and growth - explore full details
Compensation and benefits for this role apply to full-time employees in the United States and may vary based on local standards, laws and norms. Pay is determined by location, skills, experience, and education, and is one part of Bonterra’s total rewards package, which may also include bonuses, incentives, equity, and a comprehensive benefits program.
____________________________________________________________________________________
