IT Security Analyst – GRC

Lifeway Christian Resources•Remote,

1d•Remote

About The Position

Lifeway is seeking an IT Security Analyst – GRC to guide day-to-day IT security governance, risk management, and compliance across the organization. The role supports third-party risk assessments, PCI compliance efforts, and internal risk reviews that help protect customer and ministry data. The analyst supports the third-party risk management program, helps put security systems and programs in place to manage vulnerabilities, and uses industry frameworks to support governance and risk management across technology systems and processes. The role also supports IT compliance and risk assessments, including PCI scans, assessments, remediation, and Right to Be Forgotten requests; performs internal risk assessments to verify that Lifeway’s practices meet PCI and other standards and regulations; contributes to security policies, standards, and procedures; and collaborates with internal and external departments. This is a remote position in the U.S., with occasional travel to Nashville or the Middle Tennessee area for team gatherings, typically 2–4 times per year and often overnight. Lifeway describes a Work from Anywhere culture with autonomy and flexibility in work hours and provides equipment and resources for a productive, ergonomic workspace. Full-time employees are eligible to enroll in comprehensive benefits plans.

Requirements

Bachelor’s degree in computer science, cybersecurity, information technology, or a related field.
3–5 years of IT risk, audit, or compliance experience.
1–2 years of experience performing assessments and/or audits and identifying and addressing security control gaps, abnormal behavior patterns, and attack techniques.
Working knowledge of risk assessment and IT auditing methods.
Working knowledge of security frameworks, including NIST-CSF, PCI-DSS, MITRE, and OWASP.
General knowledge of security domains and cloud security concepts, and familiarity with vulnerability assessment tools.
Actively involved in an evangelical Christian church.
Ability to travel to the Middle Tennessee area 2–4 times annually for team gatherings.

Nice To Haves

Master’s degree in computer science, cybersecurity, information technology, or a related field.
Security+ or CISSP certification.
CISA or CISM certification.
GIAC, CCSK, or CCSP certification.

Responsibilities

Live out Lifeway’s mission and values, showing deep commitment to Kingdom work.
Support third-party risk management (TPRM) assessments and maintain the overall TPRM program.
Put security systems and programs in place to manage vulnerabilities.
Use industry frameworks to support governance and risk management across technology systems and processes.
Support IT compliance and risk assessments, including PCI scans, assessments, remediation, and Right to Be Forgotten requests.
Perform internal risk assessments to confirm Lifeway’s practices are secure and meet PCI and other standards and regulations.
Contribute to developing and maintaining security policies, standards, and procedures.
Collaborate with internal and external departments on projects.
Travel to the Middle Tennessee area 2–4 times annually for team gatherings.