Senior Analyst - Governance, Risk & Compliance

ZS • Princeton, NJ

16h • Hybrid

About The Position

ZS IT Support teams are aligned with the company’s business strategy and operating model and aims to provide its 4000 plus employees and their clients the right tools and information for high performance. The IT organization focuses on providing products and services to ZS to ensure successful business outcomes. This involves providing a scalable, sustainable and reliable IT infrastructure, customized applications, messaging and collaboration products, Business Intelligence and Database administration support along with a reliable 247 uninterrupted high-quality technology support services.
We are seeking applicants for the position of Senior Analyst - Governance and Risk team to join our US IT Governance, Risk and Compliance team. The position will support various management directed, IT risk governance initiatives which include following job requirements:
The primary responsibility of this role is to perform comprehensive risk assessments, including vendor due diligence, process/project security risk assessments, and maintaining the risk register. The successful candidate will possess a strong understanding of IT risk management principles and will play a crucial role in identifying, assessing, and mitigating risks to ensure the security and stability of our organizational infrastructure. It requires strong analytical skills, familiarity with security domains, and the ability to communicate risk insights clearly and effectively.

Requirements

• Bachelor's degree in Computer Science, Information Systems, or a related field (master's degree is a plus).
• Minimum of 4-6 of years' experience in IT risk management, IT governance or related field.
• Strong understanding and knowledge of IT risk assessment methodologies, frameworks industry best practices and regulatory requirements (GDPR, HIPAA, PCI DSS).
• Strong experience with vendor risk management and security risk assessments.
• High proficiency in using risk assessment tools and technologies.
• Excellent analytical and problem-solving skills.
• Strong written and verbal communication skills, with the ability to effectively communicate technical concepts to both technical and non-technical audiences.
• Strong organizational and time management skills, with the ability to manage multiple priorities and deadlines.
• Professional appearance and demeanor, with ability to exercise good judgment and discretion.
• Proven ability to work creatively and analytically in a problem-solving environment.
• Fluency in English.
• Client-first mentality.
• Intense work ethic.
• Collaborative spirit and problem-solving approach.
• Candidates must have authorization to work in the United States that does not now or in the future require employer sponsorship.

Nice To Haves

• Relevant certifications such as Certified in Risk and Information Systems Control (CRISC), Certified Information Systems Security Professional (CISSP), or Certified Information Security Manager (CISM) are preferred, ISO 27001.

Responsibilities

• Perform assessments for vendors, processes, and projects to identify security gaps and recommend controls.
• Evaluate risks across IT systems, applications, infrastructure, and third-party engagements.
• Document assessment findings with clear rationale and actionable recommendations.
• Perform vendor risk assessments to evaluate third-party security posture, document findings, and recommend mitigation strategies aligned with organizational standards.
• Maintain and update the risk register, ensuring accurate classification, ownership mapping, and closure tracking across all active and draft risks.
• Collaborate with internal teams (e.g., security, legal, procurement) and external stakeholders to ensure risk documentation is complete, validated, and aligned with business priorities.
• Conduct periodic risk hygiene activities, including archival of outdated risks, evidence collection, and exception tracking.
• Ensure all risk-related documentation is clear, complete, and accessible for stakeholders, supporting decision-making and compliance readiness.
• Apply knowledge of regulatory standards (e.g., ISO, NIST, GDPR) to assess and document compliance.
• Support the implementation of security policies and control frameworks across business functions.
• Monitor control effectiveness and suggest improvements where needed.
• Prepare risk reports with summaries of findings, impact analysis, and mitigation plans.
• Share updates on risk trends, exceptions, and closure progress on a regular cadence.
• Communicate technical risk concepts in a clear, accessible format for non-technical audiences

Benefits

• Comprehensive total rewards package that supports your health and well‑being, financial future, time away, and professional development.
• Robust skills‑building programs
• Multiple career progression paths
• Internal mobility
• Deeply collaborative culture
• Opportunity to do meaningful work, expand your capabilities, and thrive as part of a global community.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior