GRC and Security Analyst

Tasks

• Align controls to NIST frameworks
• Align controls to SOC 2
• Collect organize and validate audit evidence
• Implement ISO IEC 27001 controls
• Implement ISO IEC 42001 controls
• Maintain control documentation versioning
• Maintain security privacy and AI governance policies
• Perform risk assessments and compliance reporting
• Review cloud security controls for SaaS APIs and integrations
• Support US market compliance activities
• Support audit readiness for internal reviews customer questionnaires and external audits
• Support incident response documentation
• Support regional data protection compliance
• Support security privacy compliance initiatives
• Track compliance tasks findings and remediation actions

Perks/Benefits

• N/A

Skills/Tech-stack

AI Governance | AI RMF | API Security | Audit evidence | Bash | CI/CD | CI/CD Security | Cloud Security | Document Control | GRC | IEC 27001 | ISO/IEC | ISO/IEC 27001 | ISO/IEC 42001 | NIST | NIST AI | NIST AI RMF | NIST CSF | Penetration Testing | Python | Ruby on Rails | SOC 2 | SOC 2 Evidence | SaaS security | Vulnerability Assessment