Senior, Cybersecurity Assurance Analyst

Responsibilities

• Conduct comprehensive internal and external security compliance assessments, identify cybersecurity vulnerabilities, and maintain the organizational risk register.
• Manage internal and external audits by preparing compliance documentation, maintaining the audit repository, and tracking remediation findings.
• Coordinate quarterly meetings with risk and control owners to review mitigation plans, evaluate control effectiveness, and report on quarter-over-quarter performance metrics.
• Administer GRC and procurement platforms, and support customer pre-sales and renewals by completing cybersecurity assurance documentation within RFPIO.

Minimum Qualifications

• 5+ years of combined experience in Cybersecurity Risk, Vendor Risk, Enterprise Risk, IT System Administration, or IT Auditing.
• Professional proficiency in English, including reading, writing, and speaking, to document processes and collaborate with US-based teams.
• Core implementation and assessment experience with compliance standards and frameworks such as SOC 2, ISO 27001, ISO 22301, ISO 42001, or HIPAA.
• Experience applying third-party risk management (TPRM) frameworks to execute vendor security assessments.

Preferred Qualifications

• Technical experience in independently coordinating, executing, and documenting business continuity or disaster recovery testing scenarios.
• Experience automating GRC processes using platforms such as Fusion RM, Zip, Anecdotes, or Vanta.
• Professional certifications or working knowledge related to NIST, ISO 31000, or ISO 42001 frameworks.
• Experience utilizing ticketing platforms to track and manage cybersecurity vulnerabilities.
• Technical familiarity with security controls and technologies used for securing SaaS environments.
• Proficiency in navigating and utilizing Google Products (Docs, Sheets, Forms, Slides) for data collection and reporting.