Address
Form of workStratascale is seeking a cybersecurity Integrated Risk Management (IRM) Analyst with experience evaluating business processes, identifying needs, and developing strategies to maximize cybersecurity improvements. The candidate would be responsible for working with clients to understand their various risk and compliance processes and to aid in the design, configuration, and testing of technologies to meet those needs.
This role will report to the Director - Security Programs - Strategy & Risk within the Stratascale department.
This position is a remote position that reports to a Stratascale customer as determined by Stratascale management.
About UsStratascale, an SHI company, brings together the benefits of 31 years' experience delivering the very best technologies with a fresh consultative approach to designing, delivering and supporting the technology our customers need to transform their business. We call it Digital Agility.
To learn more about Stratascale visit our website: https://stratascale.com/
Responsibilities- Assess, document, and report on the compliance and risk posture of information assets for Stratascale and its customers
- Support internal and external audit processes for relevant compliance
- Work with various business units to ensure controls are adequate, appropriate, and effective
- Collaborate on the definition of security standards and development organizational policies
- Assist with vendor due-diligence processes and help define overall third-party Risk Management efforts
- Support customer information security compliance programs, ensuring IT activities, processes, and procedures meet defined requirements, policies, and regulations
- Develop strategies to address awareness and training for all stakeholders as well as technical solutions
- Stay informed on current and emerging regulatory and compliance trends and initiatives
- Minimum 1-4 years of professional experience
- Bachelor's degree or equivalent combination of education and experience
- Team player with strong work ethic with attention to detail
- Excellent written, verbal, and consultative skills (e.g., professionalism, collaboration, negotiation, conflict resolution, quick learner, etc.)
- Good Interpersonal skills that demonstrate the ability to communicate with both technical and non-technical personnel in cross-functional teams to influence decision making
- Strong process and data analysis skills with the ability to communicate systems concepts in a meaningful business context
- Proficiency with Microsoft Office Suite (e.g., Word, Excel, PowerPoint, Visio)
- Willingness to obtain Industry certifications (e.g., CTPRP, CISSP, CISM, CRISC, CIPP, CISA)
- Experience with one or more of the following: TruOps, Prevalent, ServiceNow GRC, Microsoft Compliance Manager and Microsoft Purview, and/or other relevant GRC, Privacy, and/or Risk Management technologies
- Experience with IT governance, risk, and compliance management in a complex global environment
- Familiarity with security frameworks - in particular NIST RMF, NIST CSF, and ISO 27001/27002
- Experience with legal and regulatory compliance standards such as NYDFS Cybersecurity Regulation, GDPR, HIPAA, and PCI
- Strong understanding of fundamental information security concepts and technology
- Ability to develop security standards and guidelines based on best practices and industry standards
- Experience in a Business Analyst role with responsibility for facilitating meetings to define / compile business requirements and developing functional / technical documentation, in a client environment
- Experience working on systems implementation projects with COTS / 3rd party software, including configuration and testing activities
- Experience with Big 4 consulting firms, or other global system integrators a plus
- Travel up to 10%
- The estimated annual pay range for this position is $75,000 - $100,000 which includes a base salary and bonus. The compensation for this position is dependent on job-related knowledge, skills, experience, and market location and, therefore, will vary from individual to individual. Benefits may include, but are not limited to, medical, vision, dental, 401K, and flexible spending.
- Equal Employment Opportunity - M/F/Disability/Protected Veteran Status
