GRC Security Analyst

Responsibilities:

• Monitoring and enforcing compliance with critical security frameworks (such as NIST CSF, NIST RMF, ISO 27001/27002, SOC 2, ISO 42001) and industry-specific regulations (such as GLBA, CCPA, GDPR) pertinent to the financial services and real estate valuation sectors.
• Conducting comprehensive risk assessments of diverse scope to identify security vulnerabilities, evaluating the effectiveness of existing controls, and resolving a wide range of issues using judgment and interpretation.
• Developing, maintaining, and adapting security policies, procedures, and guidelines in alignment with industry best practices, client contractual requirements, and mortgage lending regulatory standards.

Qualifications:

• A minimum of 5 years of related experience in GRC, security compliance, or risk management roles with a Bachelor’s degree; or 3 years and a Master’s degree; or equivalent work experience.
• Complete knowledge and full understanding of relevant security frameworks and standards (e.g., NIST CSF, SOC 2, ISO 27001, ISO 42001) and data privacy regulations (GLBA, GDPR, CCPA).
• Relevant industry certifications: CISSP, CISM, CISA, CRISC, AIGP, or equivalent.

Compensation:

• The base salary for this position ranges from $114,000 to $139,000 annually, depending on your location, experience, and qualifications.
• Additional compensation offerings include company profit-sharing bonus program, communication stipends, and referral bonuses.
• Inclusive benefits package offering: comprehensive medical, dental, and company paid vision insurance, 401(k) retirement plan with employer match, and paid time off (PTO).