GRC Security Analyst - Information Security
Core
Manage governance, risk, and compliance (GRC) operations, including risk identification, remediation tracking, vendor reviews, and audit support for a global Atlassian app provider.
Role type
GRC Security Analyst
Builds
Security governance initiatives, compliance frameworks (ISO 27001, SOC2), and risk mitigation plans
Domain
Information Security / GRC / Compliance
Deliverable
dashboards & analysis
Required skills
Information Security frameworks (CIS, ISO 27001, SOC 2), Vendor Risk Management, Regulatory Compliance, Risk Assessment, Corrective Action Planning, Audit Support, Business Continuity Testing
Preferred skills
Cloud security tools (AWS, Azure, GCP), CISA/CISSP certification, Acquisition integration support
Responsibilities
Coordinate security governance goals and initiatives; Support sales channels with security assessments and audits; Conduct vendor risk management assessments; Provide support for regulatory compliance initiatives; Identify and track security policy non-conformities; Monitor risk acceptances and remediation plans; Track audit and risk assessment findings; Monitor business continuity and disaster recovery testing; Perform periodic compliance checks; Support integration plans for acquisitions; Update security policies and processes; Participate in security awareness campaigns.
Seniority
Mid-level, hands-on IC