Job Description

Job Title : Security Analyst - Governance Risk Compliance (GRC) Analyst
Job Family : Security Management
Location : Boca Raton, FL 33434
Duration : 12 months

Job Summary :

We are seeking an experienced GRC Analyst to lead the IT security risk and audit program. This position is critical in managing, assessing, and mitigating risks for the organization s information assurance and cybersecurity program. The role focuses on ensuring compliance with industry standards and frameworks such as NIST, ISO, PCI, and ISACA. The GRC Analyst will collaborate with multiple departments, including Security Operations and IT Operations, to evaluate, document, and improve security controls across the organization.

Key Responsibilities :

• Perform reviews related to PCI, SOC2, ISO, and other applicable cybersecurity controls to ensure technology infrastructure complies with standards and security policies.
• Plan and execute IT security controls effectiveness assessments and manage remediation of identified gaps.
• Maintain the IT security risk and compliance matrix and perform management reporting.
• Oversee the Third-Party Risk Management Program (TPRM) , analyzing SOC-2 reports and mapping to key IT security and compliance controls (e.g., NIST, PCI, COBIT).
• Manage the IT Security Vulnerabilities Management Program , ensuring alignment with PCI and NIST standards.
• Conduct risk assessments by identifying and prioritizing critical operations and assets, estimating potential losses, and identifying cost-effective mitigation actions.
• Coordinate and verify remediation of audit findings and develop plans of action for risk mitigation.
• Produce formal audit reports following ISACA Audit Standards.
• Promote compliance with regulatory requirements (e.g., PCI DSS) and IT best practices.

GRC Analyst Skills & Requirements :

• 7-10 years of IT Audit experience (CISA certification preferred).
• 3 years of IT Risk Management lifecycle experience.
• 3 years of hands-on technical experience (e.g., developer, system administrator).
• Experience with NIST 800-30 Risk Assessment Standard .
• Strong experience with IT General Controls evaluation and design .
• Advanced business process mapping, documentation, and policy development skills.
• Recent experience in Information Security , with up-to-date knowledge of the current threat landscape.
• Solid understanding of PCI DSS standards.

Education and Certifications :

• Bachelor s degree in Computer Science, Information Systems, Business Administration, or a related field, or equivalent work experience.
• CISA and CISSP certifications are preferred.

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.

• Dice Id: 10468931
• Position Id: SA24-14469

Job Tags

Similar Jobs