Associate Security Analyst, Risk and Security
About the position Responsibilities • Requesting, submitting and filing artifacts related to the completion of third-party audits including, but not limited to HITRUST CSF, SOC 2, ISO 27001, FedRAMP, TX-RAMP and contractually required frameworks • Responding to requests for information about the PG Forsta security program and the security of PG Forsta's products • Evaluating the security of PG Forsta vendors as part of the third-party risk management program • Work with external auditors to interpret audit requests into actionable requests and provide responses • Collect and review evidence of technical control implementation and report on deficiencies and control failure • Communicate significant control and compliance risk to management • Identify opportunities for improvement in response and evidence collection by consolidating audit requirements • Identifying areas that would support automating evidence collection • Supporting an ongoing audit-friendly culture • Collect and update information in the organization's Risk and Security knowledge repositories • Monitor and audit people, processes, and technology to ensure compliance with approved policies • Complete tasks associated with internal controls monitoring and report on collection difficulties or escalate to management as appropriate • Assist with the documentation of computer security and emergency measures policies, procedures, and tests • Work with Legal, Technology, and other business partners to communicate, translate and maintain controls that protect data and appropriately manage its lifecycle • Identify and communicate risks relating to PG Forsta data, systems, and personnel as discovered Requirements • High School Diploma or equivalent • Background in audit and governance practices • Understanding of information security practices and technologies from an audit and compliance perspective Benefits • Base salary range from $54,000 to $70,000 • Discretionary bonus or commission tied to achieved results • Competitive benefits package Apply tot his job