Information Security GRC Analyst

Major Duties

Classification : Exempt, Non-Bargaining

Position may be remote; within commuting distance to the office in South Portland, ME area.

• This position will require an additional national security background check by the US Department of Justice as a condition of employment.

The Information Security GRC Analyst will be responsible for identifying, analyzing and influencing the management of information risks across the organization. Additionally, this person will be responsible for compliance and security awareness program activities. A primary focus will be the management of the Vendor Risk Management program.

Responsibilities

Performs focused information governance, risk and compliance assessments of existing or new services and technologies, along with business counterparts.

Communicates governance, risk and compliance assessment findings to team owners and custodians of information risk "business partners," or information governance teams and information security teams.

Provides consultative advice to information governance or security teams that enables them to suggest informed governance, risk and compliance management decisions.

Identifies and facilitates implementation of appropriate controls to effectively manage information risks as needed.

Identifies opportunities to improve governance, risk and compliance posture, developing solutions for remediating or mitigating risks and assessing the residual risk.

Maintains strong working relationships with individuals and groups involved in managing information governance, risk and compliance across the organization.

Some travel may be required.

Qualifications

Education and Experience :

Benefits Offered

We are proud to offer a comprehensive and competitive benefits package :

Salary

Pay range (commensurate with skills and experience) : $91,244 - $138,299

Equal Opportunity Employer

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender identity or expression, sexual orientation, national origin, marital status, familial status, genetics, disability, age, veteran status or any other characteristic protected by law.