Senior Information Security GRC Analyst

Hexagon Safety & Infrastructure - Madison, AL

Full-time - Mid Level

Madison, AL

About the position

The Senior Information Security GRC Analyst at Hexagon Safety & Infrastructure is responsible for ensuring that the organization's information security policies and procedures comply with regulatory requirements. This role involves implementing effective risk management strategies and establishing governance frameworks to enhance accountability and transparency within the organization. The analyst will also develop compliance programs and conduct audits to assess the effectiveness of governance and risk management processes.

Responsibilities

• Ensure adherence to relevant industry regulations and standards.
• Develop and implement compliance programs to mitigate risks.
• Identify, assess, and prioritize risks associated with business operations and IT services.
• Establish and maintain effective governance frameworks.
• Collaborate with leadership to define and communicate governance policies and procedures.
• Plan and conduct internal audits to evaluate governance and compliance effectiveness.
• Work with external auditors and regulators for assessments.
• Develop and update governance, compliance, and risk management policies.

Requirements

• Bachelor's or Master's degree in Business, IT, Risk Management, or a related field (education can be substituted for experience).
• 3+ years of experience in a similar role focusing on governance, risk management, and compliance within the IT or MSP industry.
• In-depth knowledge of IT governance, risk management, and compliance principles.
• Strong understanding of relevant industry regulations and standards.
• Excellent analytical and problem-solving skills.
• Effective communication and interpersonal abilities.
• Ability to develop and maintain strong relationships with stakeholders.

Nice-to-haves

• Relevant certifications such as CISA, CRISC, CISM, CISSP, or similar.