Deskripsi Pekerjaan
Our company, a leading institution in the Banking & Financial Services sector, is seeking a highly skilled and experienced Senior GRC Analyst to join our dynamic security and compliance team. This role is critical in ensuring our organization meets the highest standards of regulatory compliance and information security.
As a Senior GRC Analyst, you will leverage your deep expertise in NIST 800-53, FedRAMP, GovRAMP, and SOC 2 to design, implement, and manage comprehensive governance, risk, and compliance programs. You will serve as the subject matter expert, guiding cross-functional teams through complex certification processes and continuous monitoring. Your strategic insights will directly contribute to strengthening our security posture and enabling business growth in a highly regulated environment.
This is an exceptional opportunity for a driven professional to take ownership of high-impact compliance initiatives, work with cutting-edge frameworks, and advance their career within a prestigious organization committed to security excellence.
Tanggung Jawab
- Lead and manage the end-to-end compliance lifecycle for FedRAMP, GovRAMP, and SOC 2 certifications.
- Develop, review, and maintain security policies, standards, and procedures aligned with NIST 800-53 and other applicable frameworks.
- Conduct comprehensive risk assessments, gap analyses, and internal audits to identify and remediate compliance issues.
- Collaborate with engineering, IT, and business teams to integrate security requirements into system development and operations.
- Prepare and present compliance reports, dashboards, and metrics to senior leadership and external stakeholders.
- Manage relationships with assessors, auditors, and regulatory bodies to ensure smooth certification and renewal processes.
- Stay updated on evolving regulations, standards, and threats to proactively adjust the compliance strategy.
- Mentor junior analysts and contribute to continuous improvement of the GRC program.
Kualifikasi
- Bachelor’s degree in Information Security, Computer Science, or a related field.
- Minimum 5 years of hands-on experience in GRC roles with a strong focus on FedRAMP and GovRAMP.
- Deep knowledge of NIST SP 800-53, NIST CSF, SOC 2, and related compliance frameworks.
- Proven experience leading successful FedRAMP and/or GovRAMP certification efforts.
- Professional certifications such as CISSP, CISM, CRISC, or CISA are strongly preferred.
- Excellent analytical, problem-solving, and project management skills.
- Strong verbal and written communication skills with the ability to articulate complex requirements to diverse audiences.
- Experience working in banking or financial services regulatory environments is a plus.