GRC Security Analyst - Information Security
Core
Manage governance, risk, and compliance (GRC) operations, including vendor risk, regulatory compliance, audit support, and security policy enforcement for a global Atlassian app provider.
Role type
GRC Security Analyst
Builds
Security governance initiatives, compliance frameworks (ISO 27001, SOC2), and risk mitigation plans.
Domain
Information Security / GRC / Cloud Security
Deliverable
dashboards & analysis
Required skills
GRC operations, vendor risk management, regulatory compliance, audit support, risk assessment, corrective action planning, policy development, business continuity monitoring, security awareness campaign coordination
Preferred skills
Cloud security tools (AWS, Azure, GCP), CISA/CISSP certification
Technologies
ISO 27001, SOC2, GDPR, CIS, Amazon AWS, Azure, Heroku, GCP
Responsibilities
Coordinate security governance goals and initiatives; support sales channels with security assessments and audits; conduct vendor risk management assessments; support regulatory compliance initiatives; identify and track security policy non-conformities; identify and track security risks and mitigation plans; track risk acceptances and exceptions; ensure timely resolution of audit findings; monitor business continuity and disaster recovery testing; perform periodic compliance checks; support integration plans for acquisitions; update security policies and processes; participate in security awareness campaigns.
Seniority
Mid-level, hands-on IC
