GRC Analyst
What you need
- Required certification: CompTIA Security+, ISC2 CC, or CGRC
- Office 365 proficiency in Word, Excel, and Outlook
- Strong written and verbal communication skills
- Effective SOP writing and time management abilities
- Knowledge of GDPR, HIPAA, CCPA, and other regulations
What you'll do
- Perform cybersecurity due diligence assessments for clients and vendors
- Assist with SOC 2 audit evidence collection and coordination
- Deliver security awareness training via KnowBe4 to clients
- Develop WISPs and AI governance programs with clients
- Research DORA, GDPR, HIPAA, and other data privacy requirements
Seeking someone passionate about information security and customer service to assist customers in meeting their cybersecurity regulatory and legal requirements. Analysts will work with customers to develop formalized information security policies, analyze the efficacy of current policies and procedures, evaluate the risks posed by third-party providers, provide security awareness training to clients, and provide insight into cybersecurity regulations.
Responsibilities (including, but not limited to):
- Performing and assisting with cybersecurity due diligence assessments on behalf of clients
- Performing and assisting with cybersecurity due diligence assessments on internal vendors
- Assisting with coordinating and collecting evidence for internal compliance initiatives (e.g., SOC 2 audits)
- Providing insight into updating internal information security documents and policies
- Assisting with executing security awareness training via KnowBe4
- Coordinating and working with clients to develop formalized Written Information Security Programs (WISPs) and AI governance programs
- Coordinating with other analysts and engineers as part of vCISO advisory services
- Researching and keeping up to date with financial services, US healthcare, and data privacy requirements including DORA, FCA, CCPA, GDPR, HIPAA, FINRA, DFSA, ADGM, CSSF, and NYDFS.
Qualifications:
- Intermediate operational capabilities for the Office 365 stack (Microsoft Word, Excel, Outlook)
- Strong ability to direct self-work with excellent organizational and time management skills.
- Excellent verbal and written communication skills, especially when communicating technical concepts to non-technical audiences.
- Critical and creative thinking to strategize how to add value to customer engagements and improve processes
- Effective SOP writing.
- Ability to remain flexible as processes continuously improve.
- Required certifications: One of either CompTIA Security+, ISC2 CC, or CGRC
- Preferred certifications: OCEG GRCP, CGRC, CRISC, CISSP, SecAI+, AIGP or other AI governance certifications
- Knowledge of Secure Software Development Life Cycle (SSDLC) practices is a plus.
- Experience with GRC platform implementation and operation is a plus.
Optimize your resume for this job
Get a match score and the keywords you're missing
About Abacus AI
Abacus AI is the world's best AI super assistant and general-purpose agent! Customers use Abacus AI is their AI control center from where they can create, deploy and monitor AI agents. These agents can pretty much do any task from creating documents to automating workflows and complex decisions. We are leaders in agentic research, and our state-of-the-art AI agent, Deep Agent, can create entire software systems including vibe-code SaaS apps from agentic templates. Thousands of AI native busineses have been started on our platform! With over 2 million customers and several F500 Companies, we are automating white-collar work and building the AGI control center of the future
Similar roles
