Governance, Risk & Compliance (GRC) Analyst – RSA Archer | Remote (EST Time Zone)

We are seeking a talented and passionate Security Contracts/Regulations and Third Party Security Specialist – GIS Governance, Risk & Compliance Consultant. Overall 7+ years of industry experience in security contract negotiations, security regulations research/analysis, and third-party security assessments for large global financial organizations and their Cybersecurity teams • .Deep experience in applying knowledge of Cybersecurity policies, Cybersecurity standards, Cybersecurity controls, Cybersecurity programs and frameworks to third party security contract negotiations and international cybersecurity regulations • .Experience with NIST CSF, ISO 27001, NIST 800.30, FFIEC, and SEC Regulation S-P industry standards, frameworks, and regulations for Information Security • .Subject Matter Expertise in using the Standard Information Gathering Questionnaire (SIG) to conduct third party security assessments • .Experience with evaluating SOC reports, ISO 27001 certifications, and other internationally recognized independent attestations for evaluating third party security controls • .Proven expertise in related security domains (e.g., security risk assessments, audits, controls definition/testing, etc.) • .Comfortable collaborating with Business and Cybersecurity leadership on security contract risks, third-party security assessment risks, and negotiating their resolution • .Experience in IT Governance, Compliance, and Risk management processes and tools (MetricStream, RSA Archer, OneTrust or similar eGRC platforms) • .Bachelor’s degree in Computer Science, Computer Information Systems, or an equivalent combination of education, certifications, and experience • .Proficient use of Microsoft Outlook, Microsoft Teams, Microsoft SharePoint, and Microsoft Office 365 • .Preferred professional qualifications with certifications (CISSP, CISA, CISM, CRISC, etc.) . Apply To this Job Apply To This Job