Information Security GRC Analyst

Onetrust - Atlanta, GA

Full-time - Mid Level

Atlanta, GA

Professional, Scientific, and Technical Services

About the position

The Information Security GRC Analyst role focuses on governance, risk management, and compliance within the information security domain. The analyst will be responsible for assessing and managing risks, ensuring compliance with relevant regulations, and implementing security policies and procedures to protect the organization's information assets.

Responsibilities

• Assess and manage information security risks across the organization.
• Develop and implement security policies and procedures.
• Conduct compliance audits and assessments to ensure adherence to regulations.
• Collaborate with various departments to promote security awareness and best practices.
• Prepare reports on security incidents and compliance status for management.

Requirements

• Bachelor's degree in Information Security, Computer Science, or a related field.
• 2+ years of experience in information security, risk management, or compliance roles.
• Strong understanding of security frameworks and regulations (e.g., NIST, ISO 27001, GDPR).
• Excellent analytical and problem-solving skills.
• Effective communication skills, both written and verbal.

Nice-to-haves

• Certifications such as CISSP, CISM, or CISA are preferred.
• Experience with security tools and technologies (e.g., SIEM, firewalls, intrusion detection systems).
• Familiarity with cloud security practices and technologies.

Benefits

• Health insurance coverage
• 401k retirement plan
• Paid time off and holidays
• Professional development opportunities
• Flexible work hours