Analyst, GRC

This role blends project management skills together with traditional compliance expertise and a solid information security background together in order to successfully plan for and drive forward these programs. You will be responsible for helping maintain existing and achieve new accreditations such as ISO 27001, ISO 27701, SOC 2, and HIPAA. You will collaborate with others across the company to support policy management, participate in our audits, and improve the overall security posture across the company. You will be working with our GRC, security, and privacy teams, as well as technical leaders and engineers, and our external auditors. Supporting the Outreach Information Security Management System (ISMS) governance, risk and compliance activities. Developing and evolving information security policies and helping educate teams of their responsibilities and obligations.