Security Analyst

Paymentus Group Inc•Charlotte, NC

7d•Onsite

About The Position

The Information Security GRC Analyst reports to the Director, IT Compliance. The role interacts with multiple departments, manages compliance readiness, supports the central GRC repository, and conducts risk and gap assessments based on industry-leading frameworks. It also develops remediation recommendations and tracks remediation progress and related metrics. The position supports audit and compliance activities, maintains evidence and risk records, tracks IT and security controls, and contributes to policies, governance plans, metrics, and security awareness programs. The role operates in a professional office environment, with little to no travel expected. Occasional evening and weekend work may be required as job duties demand.

Requirements

Working knowledge of risk management, audits (SOC 1, SOC 2, PCI DSS), and information security best practices.
Basic understanding of regulatory compliance and information security frameworks such as GDPR, CCPA, NIST, and CIS Controls.
Experience working with internal and external resources across a variety of departments and office hierarchies.
Self-driven, with high attention to detail.
Excellent written and verbal communication skills.
Ability to operate in and maintain a fast pace and cadence.
Authorized to work lawfully in the United States of America.

Nice To Haves

A bachelor's degree and two years of regulatory compliance or similar experience in payments or consumer finance, or a similar combination of education and experience.

Responsibilities

Support audit and compliance activities by gathering evidence, conducting preliminary assessments, and assisting with remediation of audit findings.
Maintain and monitor a central repository of audit evidence.
Conduct gap analyses on industry-standard compliance and regulatory requirements.
Track, update, and draft policies, standards, and procedures.
Maintain an up-to-date risk register and track remediation status.
Collaborate with departments on GRC-related objectives.
Track and ensure compliance with IT and security controls covering a wide range of regulations.
Follow up with team members to drive progress on tracked issues.
Develop and contribute metrics and KPIs for CISO and executive management review.
Review, update, and test governance plans, including BCP, IRP, and disaster recovery plans.
Assist in developing and delivering security awareness and training programs for employees.
Conduct risk and gap assessments and provide remediation recommendations, tracking, and associated metrics.