Analyst Jobs

About The Position

Requirements

• Working knowledge of risk management, audits (SOC 1, SOC 2, PCI DSS), and information security best practices.
• Basic understanding of regulatory compliance and information security frameworks such as GDPR, CCPA, NIST, and CIS Controls.
• Experience working with internal and external resources across a variety of departments and office hierarchies.
• Self-driven, with high attention to detail.
• Excellent written and verbal communication skills.
• Ability to operate in and maintain a fast pace and cadence.
• Authorized to work lawfully in the United States of America.

Nice To Haves

• A bachelor's degree and two years of regulatory compliance or similar experience in payments or consumer finance, or a similar combination of education and experience.

Responsibilities

• Support audit and compliance activities by gathering evidence, conducting preliminary assessments, and assisting with remediation of audit findings.
• Maintain and monitor a central repository of audit evidence.
• Conduct gap analyses on industry-standard compliance and regulatory requirements.
• Track, update, and draft policies, standards, and procedures.
• Maintain an up-to-date risk register and track remediation status.
• Collaborate with departments on GRC-related objectives.
• Track and ensure compliance with IT and security controls covering a wide range of regulations.
• Follow up with team members to drive progress on tracked issues.
• Develop and contribute metrics and KPIs for CISO and executive management review.
• Review, update, and test governance plans, including BCP, IRP, and disaster recovery plans.
• Assist in developing and delivering security awareness and training programs for employees.
• Conduct risk and gap assessments and provide remediation recommendations, tracking, and associated metrics.