- 经验
- 4年以上
- 薪水
- USD 80,000 – USD 90,000 / year
- 职位空缺
- 1
- 发布
- 2小时前
- 工作模式
- 在办公室
- 学历
- Bachelor's degree in Cyber Security, Information Technology, or related fields
- 合格
- Candidates must have valid authorization to work in the United States without needing sponsorship.
- 恢复
- 需要申请
你的工作地点
职位描述
About Aaratech Inc.
Aaratech Inc. is a technology-focused company delivering innovative solutions in cybersecurity, healthcare, and enterprise sectors. The organization prioritizes protection of digital assets and security resilience by leveraging advanced technology, expertise, and partnerships.
Job Overview
The Cyber Security GRC Analyst role involves supporting Governance, Risk, and Compliance (GRC) activities by managing security frameworks, overseeing audit readiness, performing risk evaluations, and ensuring adherence to industry regulations to enhance the company's security and compliance posture.
Key Responsibilities
- Assist in control testing and collect evidence to meet NIST, ISO 27001, and SOC 2 standards.
- Perform compliance gap analyses and monitor remediation efforts.
- Create and update security policies, standards, and compliance documentation.
- Conduct risk assessments on third-party vendors.
- Work collaboratively with IT, security, and business units during audits and compliance processes.
- Compile audit-ready reports, documentation, and validation materials.
Required Qualifications
- Bachelor's degree in Cyber Security, Information Technology, Information Systems, or a related discipline.
- Minimum 4 years of experience in IT audit, GRC, compliance, or risk management roles.
- Familiarity with NIST, ISO 27001, SOC 2 frameworks and security controls.
- Hands-on experience in supporting audits, compliance projects, and managing policy documentation.
- Excellent organizational, analytical, communication, and problem-solving capabilities.
Preferred Credentials
- CISA certification is desirable.
- Training or certifications related to NIST or ISO 27001.
- Experience with SOC 2 compliance and vendor risk evaluations.
- Additional certifications such as CRISC, CGRC, ISO 27001 Lead Implementer or Lead Auditor are advantageous.
Additional Information
Candidates must be authorized to work in the United States without sponsorship.
Compensation
The salary ranges from $80,000 to $90,000 annually and is negotiable.