GRC Analyst - IT Security Risk and Audit Manager

Job Title : IT Security Risk and Audit Manager - Governance Risk Compliance (GRC) Analyst

Location : Tolls Data Center in Boca Raton, FL. This is an onsite position, not remote.

Job Summary : The IT Security Risk and Audit Manager at the Florida Turnpike Enterprise leads the IT security risk and audit program. This role involves managing, assessing, and mitigating risks as part of the information assurance and cybersecurity program, using standards such as NIST, ISO, PCI, and ISACA. The position entails developing and implementing strategies for IT security risk and audit, conducting risk assessments, and evaluating control effectiveness.

Key Responsibilities :

• Perform reviews to ensure compliance with PCI, SOC2, ISO, and State of Florida cybersecurity controls.
• Plan and assess IT security controls' effectiveness and manage remediation efforts.
• Maintain IT security risk and compliance matrices and perform management reporting.
• Oversee the Third-Party Risk Management Program (TPRM) and analyze SOC-2 and other reports, mapping to key security controls.
• Manage IT security vulnerabilities in alignment with PCI and NIST standards.
• Identify and rank the criticality of operations and assets to prioritize risk mitigation.
• Estimate potential losses and recovery costs for critical assets if threats materialize.
• Identify and implement cost-effective risk mitigation actions, including new policies and technical controls.
• Coordinate and verify the remediation of audit findings.
• Document results and develop action plans for risk mitigation.
• Produce formal audit reports based on ISACA Audit Standards.
• Promote compliance with regulatory requirements (e.g., PCI DSS) and IT best practices.

Skills and Requirements :

Education and Certifications :