security and compliance analyst

Nakisa

<div>Description:

Nakisa is seeking a detail-oriented, proactive, and technically curious Security and Compliance Analyst to support our growing global security and compliance initiatives. This role is central to maintaining and enhancing Nakisa's compliance posture with recognized standards such as SOC 1, SOC 2, ISO/IEC 27001, and data privacy regulations.

You'll work closely with internal teams and external auditors to manage evidence collection, track audit deliverables, and maintain robust documentation. You'll also assist with RFPs/RFIs from prospective clients and contribute to internal security improvement projects. A strong interest and understanding of Artificial Intelligence (AI), particularly its implications on compliance and security, is essential.

This is an excellent opportunity for someone looking to launch or grow a career in information security and compliance in a fast-paced SaaS environment that is deeply invested in cloud technology, AI, and process excellence.

Key Responsibilities:
<ul>
<li>Coordinate and manage tasks related to Nakisa's security and compliance programs, including SOC 1, SOC 2, and ISO 27001 audits.</li>
</ul><ul><li>Collaborate with internal stakeholders and external auditors to collect, organize, and validate audit evidence and documentation.</li>
</ul><ul><li>Drive and support continuous improvement of internal processes, controls, and compliance documentation.</li>
</ul><ul><li>Assist in completing security and compliance sections of RFPs, RFIs, and due diligence questionnaires from prospects and clients.</li>
</ul><ul><li>Contribute to internal information security projects and process improvements.</li>
</ul><ul><li>Ensure documentation and policies are accurate, up-to-date, and aligned with industry standards.</li>
</ul><ul><li>Monitor and follow up on compliance deadlines, audit deliverables, and remediation actions.</li>
</ul><ul><li>Stay informed on evolving security frameworks, regulatory requirements, and AI-related security practices.</li>
</ul><ul><li>Educate employees on security awareness topics and best practices through training, content creation, or internal communications.</li>
</ul>
Qualifications:
<ul>
<li>Bachelor's degree in information security, Cybersecurity, Information Systems, Computer Science, or a related field&mdash;or equivalent hands-on experience.</li>
</ul><ul><li>Solid knowledge of industry standards and frameworks, such as:</li>
</ul><ul><li>SOC 1 / SOC 2 (Type I &amp; II), ISO/IEC 27001 &amp; 27017, CIS Controls, Data protection regulations (GDPR, PIPEDA, CCPA, etc.)</li>
</ul><ul><li>Strong reporting and documentation skills:</li>
</ul><ul><li>Proficiency in generating audit reports, compliance documentation, and RFP/RFI responses</li>
</ul><ul><li>Skilled in Excel, Word, PowerPoint, and PDF tools for structured reporting and evidence tracking</li>
</ul><ul><li>Experience with compliance audits, security questionnaires, or risk assessments</li>
</ul><ul><li>Basic technical knowledge of cloud environments (AWS, Azure, GCP), access controls, encryption, and security operations</li>
</ul><ul><li>Exceptional attention to detail, with the ability to identify gaps, maintain precision, and meet deadlines</li>
</ul><ul><li>Strong verbal and written communication skills, comfortable working cross-functionally with internal teams, auditors, and clients</li>
</ul><ul><li>Demonstrated interest and foundational knowledge in Artificial Intelligence, especially its impact on cybersecurity and compliance</li>
</ul>
Preferred:
<ul>
<li>3+ years of relevant work experience in security compliance, audit, or GRC functions</li>
<li>Exposure to internal controls testing, risk registers, or information security policies</li>
<li>Certifications (or active pursuit) such as:</li>
<li>Certified in Cybersecurity (ISC&sup2; CC), ISO 27001 Lead Implementer or Foundations, CISA etc.</li></ul> 


Why Nakisa?

 Flexibility: Hybrid work model with one day a week from home or four days a month from home. 
 Time off: Three weeks of vacation to start, generous sick leave, one personal day, and maternity or paternity leave. 
 Health and wellness: Comprehensive IPD and OPD coverage plus life insurance. 
 Financial security: Three bonuses a year, including annual and festive bonuses. 
 Social perks: Team events, outdoor lunches or dinners, birthday celebrations, annual gatherings, giveaways, and more. 
 Career growth: Mentorship, education assistance up to PKR 100,000 per year, and reimbursement of job-related professional dues. 
 Culture: Supportive, values-driven teams with leaders who care.

 Make your impact at Nakisa.
If building enterprise-grade, privacy-first AI excites you, apply today and help shape the future of enterprise software.
<ul>
<li>Location: Mega Tower Gulberg, Lahore</li>
<li>Hiring process: AI-powered screening, Recruiter conversation, hiring manager interview, and a panel or skills assessment depending on the role</li>
<li>Not a perfect match: Apply anyway. Potential and drive matter here</li>
</ul>
Apply today.</div>

Security and Compliance Analyst

Magnet

<div>
 
 
 Employer Overview
 
 
 
 A national-scale private cloud platform provides secure and reliable IT services across multiple subsidiaries. The platform delivers multi-tenant, high-availability infrastructure with integrated monitoring, security, and compliance, ensuring threat detection, operational health, and regulatory alignment across hybrid environments.
 
 
 
 
 
 
 Job Summary
 
 
 
 The SOC &amp; NOC Engineer is responsible for monitoring, securing, and maintaining the operational health of the private cloud platform. The role ensures
 
 real-time threat detection, incident response, vulnerability management, and compliance adherence
 
 , supporting high availability and continuous service performance.
 
 
 
 
 
 
 Key Responsibilities
 
 
 <ul>
 <li>
 Monitor infrastructure, applications, and security events using SIEM and monitoring tools
 </li>
 <li>
 Analyze and respond to security alerts, incidents, and anomalies
 </li>
 <li>
 Perform vulnerability assessments and coordinate remediation activities
 </li>
 <li>
 Manage patch compliance and security assurance processes
 </li>
 <li>
 Operate and maintain SIEM/SOAR platforms (Elastic Stack, Splunk, or similar)
 </li>
 <li>
 Provide Tier-1 and Tier-2 support for infrastructure and security incidents
 </li>
 <li>
 Escalate critical issues to engineering teams and track resolution
 </li>
 <li>
 Support audit, compliance, and reporting requirements
 </li>
 <li>
 Participate in incident response and threat hunting activities
 </li>
 </ul>
 
 
 
 
 
 Requirements
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree or Diploma in Cybersecurity, IT, Networks, or a related field (preferred)
 </li>
 <li>
 3&ndash;7 years in SOC, NOC, or security operations roles
 </li>
 <li>
 Experience in enterprise or cloud environments preferred
 </li>
 <li>
 Strong log analysis, troubleshooting, and basic networking knowledge
 </li>
 <li>
 Strong analytical and problem-solving abilities
 </li>
 <li>
 Excellent communication and collaboration skills
 </li>
 <li>
 Detail-oriented with a proactive security mindset
 </li>
 <li>
 Ability to work independently and in cross-functional teams
 </li>
 <li>
 SIEM platforms: Elastic, Splunk, or similar
 </li>
 <li>
 Monitoring tools: APM, infrastructure monitoring, logging
 </li>
 <li>
 Vulnerability scanning tools: Tenable or similar
 </li>
 <li>
 Security operations, incident response, and threat analysis
 </li>
 <li>
 Patch management and compliance frameworks
 </li>
 <li>
 Basic networking knowledge: TCP/IP, routing, firewalls
 </li>
 <li>
 Proficiency with security monitoring, incident tracking, and reporting tools
 </li>
 <li>
 Familiarity with hybrid and multi-site cloud environments
 </li>
 <li>
 Fluency in English (written and spoken)
 </li>
 <li>
 Arabic is a plus
 </li>
 <li>
 Ability to maintain 24x7 platform monitoring and availability
 </li>
 <li>
 Capacity to perform real-time incident response and escalation
 </li>
 <li>
 Ability to coordinate vulnerability remediation and compliance processes
 </li>
 <li>
 Capability to support Tier-1/Tier-2 SOC/NOC operations and reporting
 </li>
 <li>
 CompTIA Security+
 </li>
 <li>
 Certified SOC Analyst (CSA) or equivalent
 </li>
 <li>
 Tenable certification (if applicable)
 </li>
 <li>
 ITIL Foundation
 </li>
 </ul>
</div>

SOC & NOC Engineer (Security Monitoring & Compliance)

Blackpoint Cyber

<div>Blackpoint Cyber is the leading provider of world-class cybersecurity threat hunting, detection and remediation technology. Founded by former National Security Agency (NSA) cyber operations experts who applied their learnings to bring national security-grade technology solutions to commercial customers around the world, Blackpoint Cyber is in hyper-growth mode, fueled by a recent $190m series C round.
What You&rsquo;ll Do
We are looking for a motivated Security Compliance Analyst to help lead our evolving internal security compliance program. As a member of the Internal Security Team, you work closely with the Director of Internal Security Compliance on maintaining and continuously improving our compliance initiatives.
This role requires deep knowledge of US and international security and privacy frameworks and regulations and a strong foundation in cyber security, and security compliance management. You&rsquo;ll play a key role in building organizational resiliency by refining security policies, conducting internal audits, and helping to drive the resolution of compliance gaps.
Day to day, you will:<ul><li>Support the maintenance of a comprehensive security compliance program aligned with laws, regulations, and industry best practices. This includes framework and control mapping, refining policies, standards, and procedures, and continuous monitoring of control compliance.</li><li>Maintain and optimize key programs like Third Party Risk Management and Security Awareness Training.</li><li>Apply expertise in GDPR, HIPAA, PCI DSS, NIST 800-171/CMMC, ISO 27001, SOC2, and FedRAMP controls as well as U.S. state privacy regulations to ensure practices remain compliant and up to date.</li><li>Support internal audits, partnering with stakeholders to remediate findings.</li><li>Support external audits (e.g., SOC 2) through preparation and planning, monitoring and remediation coordination, documentation and follow-up tracking.</li><li>Bring a structured, methodical approach to assisting with cross-functional project implementation.</li><li>Stay current on emerging threats, regulations, and security best practices to strengthen compliance posture.</li></ul>
What You&rsquo;ll Bring:<ul><li>Bachelor&rsquo;s degree (or equivalent experience) in IT, Information Security, Computer Science, Information Systems Management, Privacy, Law, Compliance, or related field.</li><li>Minimum 5 years of experience in privacy, security, or security compliance roles, including experience with internal audit.</li><li>Strong verbal and written communication, organizational, and documentation skills. Experience working with Atlassian Suite tools for collaboration and task management.</li><li>Deep knowledge of regulatory and compliance frameworks, including SOC2, ISO 27001, GDPR, NIS2, CMMC, FedRAMP, HIPAA, PCI DSS.</li><li>Strong analytical and problem-solving abilities with strong attention to detail.</li><li>Proven ability to work with multiple stakeholder groups, coordinating as needed, and supporting the integration of compliance into business processes.</li><li>Hands-on experience with framework and control mapping, compliance automation tools (One Trust Certification Automation, DRATA, and others), and third-party risk management (TPRM) tools.</li><li>Solid understanding of compliance risk, including implementing compensating controls and translating risk assessments for technical and non-technical audiences.</li><li>Experience working in remote or distributed environments.</li><li>Relevant professional certifications are preferred, such as CISA, CIPP/US, CIPP/E, CIPM, or CIPT</li></ul>
Blackpoint Cyber welcomes and encourages applications from qualified individuals of all races, colors, religions, sex, sexual orientation, gender identity or expression, national origin, age, marital status, or any other legally protected status. We are committed to equality of opportunity in all aspects of employment. For eligible employees in the US, Blackpoint offers competitive Health, Vision, Dental, and Life Insurance plans, a robust 401k plan, Discretionary Time Off, and other minor perks.
Compensation Range: $115K - $125K</div>

Security Compliance Analyst

Vanguard

<div><div>About The Job
In this role, you will help deliver on our investment in GRC modernization. You will lead risk assessments, design and scale forward-looking governance, risk, and compliance programs, and serve as a trusted advisor who helps teams move faster and smarter while staying audit-ready and compliant.
The Governance, Risk &amp; Compliance Analyst, Specialist is a key member of Vanguard&rsquo;s Global Enterprise Security&rsquo;s Governance, Risk, Compliance (GRC) and Strategic Operations team. This position recommends, develops, implements, and monitors enterprise-wide information security policies, standards, and operational guidelines. It assesses the end-to-end integrated GRC framework of information security policies, standards, and operational control linkages to manage cyber security risks within tolerances, satisfy regulatory obligations, and address expanding requirements, with exceptional stakeholder experience. Data-driven approaches will be used to predict risk issues, develop solutions, and partner with key owners and stakeholders. Automation will be used to accelerate delivery and improve effectiveness.
Responsibilities<ul><li>
Works with Enterprise Security and Fraud subdivisions and business units as the technical authority regarding security of application and systems software, equipment, and related capabilities and performance characteristics to evaluate their effectiveness at meeting defined requirements, determining integration requirements and identifying ramifications on operations of their implementation.</li><li>
Conducts security and fraud assessments, risk analyses and assesses contingency plans for to verify existence and effectiveness of safeguards.</li><li>
Supports the development and maintenance of a portfolio of global security and fraud policies and standards. Monitors and maintains the lifecycle of the portfolio. Responsible for oversight of management and decisions related to methodology and policy for all Security and fraud functions.</li><li>
Advises key stakeholders and security policy owners during policy and standards discussions. Interfaces with clients on all inquiries related to Information and IT Security and fraud capabilities.</li><li>
Works with Compliance and Regional Security and Fraud teams to understand global regulatory requirements, develop global and regional policies and standards, and oversee implementation. Interfaces with external regulators for Information and IT Security and Fraud.</li><li>
Reviews and analyzes current and proposed policy and standards directives and IT technical issues which may affect the implementation of Information Security and Fraud across the enterprise.</li><li>
Recommends, develops, implements and coordinates new security policies, standards, controls and operating doctrine at all levels across the company. Interprets policy relating to Vanguard information security and frau functions and provides guidance, as required.</li><li>
Defines and implements automations to accelerate delivery and improve effectiveness.</li><li>
Defines and implements data-driven approaches and dashboards to predict risk issues, develop solutions, and partner with key owners and stakeholders.</li><li>
Designs, implements and supports modernized GRC process and tool capabilities.</li><li>
Participates in special projects and performs other duties as assigned.</li></ul>
Qualifications<ul><li>
Seven years related work experience, Information Security or fraud experience required.</li><li>
Undergraduate degree or equivalent combination of training and experience. Computer Science degree preferred.</li><li>
In-depth knowledge of relevant frameworks and standards (i.e., NIST CSF, NIST 800-53, CIS Controls, ISO 27002) and financial services industry cyber regulations and guidelines, and considered an expert in the domain.</li><li>
Demonstrated experience with GRC solutions platform and automation capabilities.</li><li>
Excellent communication and influencing skills.</li><li>
Influence key stakeholders and security policy and control owners.</li><li>
Professional certification (CISSP, CISM, CompTIA, SANS, ISC2) preferred.</li></ul>
Special Factors
Sponsorship
Vanguard is not offering visa sponsorship for this position.
About Vanguard
At Vanguard, we don't just have a mission&mdash;we're on a mission.
To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.
How We Work
Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.</div></div>

Governance, Risk & Compliance Analyst, Specialist

OpenSesame

<div>About OpenSesame

OpenSesame is the trusted partner for Workforce Reinvention in the age of AI. OpenSesame delivers integrated software, curated and customizable content, and expert services &ndash; embedded into existing learning, HR, and work systems &ndash; to help organizations expand their human+AI potential and thrive through change.

Learn more: www.opensesame.com/about

About the Role

As a Senior Security Analyst on our Compliance team, you will play a key role in strengthening OpenSesame's security posture in a fast-moving, high-growth environment. We're looking for someone who brings deep technical security expertise, a proactive mindset, and the ability to turn complex risks into practical, scalable solutions.

This role spans vulnerability management, penetration testing, bug bounty operations, cloud and application security, and audit readiness. You'll partner across Engineering, DevOps, IT, and Compliance to improve security processes, support compliance efforts, and help ensure security is built into how we work, especially as we continue evolving our approach to AI security. We're looking for proven examples from your career that show you can do this job; that you've owned penetration testing programs, built vulnerability management systems, implemented security automation, and helped organizations adopt modern technologies (including AI) securely and responsibly.

You'll be a strong fit if you're detail-oriented, collaborative, and excited to build programs that reduce risk, improve visibility, and support safe innovation across the business.

Performance Objectives

Establish Security Ownership &amp; Technical Depth (0&ndash;6 Months)
<ul>
<li>Develop a comprehensive view of OpenSesame's external attack surface, vulnerabilities, and threat landscape &mdash; integrating signals from CrowdStrike, cloud environments (AWS, GCP), and application security tooling.</li>
<li>Own external penetration testing engagements end-to-end &mdash; including vendor selection, scope design, execution oversight, remediation validation, and executive reporting.</li>
<li>Build and operationalize a structured vulnerability management program &mdash; partnering with DevOps, Engineering, and IT to prioritize and remediate risk effectively.</li>
<li>Stand up scalable evidence collection and control mapping workflows in Drata &mdash; improving audit readiness and reducing manual effort.</li>
<li>Establish strong cross-functional relationships to embed security into engineering, infrastructure, and IT workflows from the outset.</li>
</ul>
Operationalize Continuous &amp; AI-Aware Security (6&ndash;12 Months)
<ul>
<li>Design and implement a continuous penetration testing program that complements annual third-party testing &mdash; leveraging automation, threat modeling, and targeted validation.</li>
<li>Own and mature the bug bounty program &mdash; improving signal quality, triage processes, researcher engagement, and remediation workflows.</li>
<li>Lead implementation of AI security practices across internal systems and product development:
<ul><li>Apply OWASP Top 10 for LLMs / AI systems to identify and mitigate emerging risks</li>
<li>Support adoption and operationalization of ISO 42001 controls</li>
<li>Define secure usage patterns for internal AI tools and third-party AI integrations</li>
</ul></li><li>Partner with Product Engineering to define and enforce secure AI and application baseline requirements &mdash; ensuring security is built into system design, not retrofitted.</li>
<li>Develop automations and tooling (Python, APIs, Make) to continuously collect threat intelligence, validate security baselines, and detect drift across AWS, GCP, GitHub, and SaaS platforms.</li>
<li>Improve Jira and Confluence workflows to create visibility, accountability, and measurable progress across security findings and remediation.</li>
<li>Provide deep technical support during audits &mdash; translating real-world implementations into clear, defensible narratives aligned with ISO 27001, ISO 27701, and ISO 42001.</li>
</ul>
Drive Security Maturity &amp; Compliance Integration (12+ Months)
<ul>
<li>Serve as a senior technical partner to Compliance &mdash; supporting vendor reviews, customer security questionnaires, and control design with practical, implementation-level expertise.</li>
<li>Continuously improve Drata automation and evidence pipelines &mdash; moving toward near real-time compliance visibility.</li>
<li>Partner with Engineering and DevOps leadership to evolve secure development practices, CI/CD security controls, and cloud security baselines.</li>
<li>Establish and refine AI security governance models &mdash; balancing innovation with risk management across internal and customer-facing use cases.</li>
<li>Identify systemic risks, recurring vulnerability patterns, and process inefficiencies &mdash; driving durable, organization-wide improvements.</li>
<li>Contribute to long-term security strategy &mdash; aligning threat management, AI adoption, compliance requirements, and engineering velocity.</li>
</ul>
What Success Looks Like
<ul>
<li>Penetration testing (external and continuous) is predictable, effective, and drives measurable reductions in risk.</li>
<li>Vulnerabilities are prioritized intelligently and remediated within defined SLAs, with clear ownership across teams.</li>
<li>The bug bounty program consistently yields high-quality findings with efficient triage and response.</li>
<li>AI systems and tools are deployed with clear security guardrails aligned to OWASP AI Top 10 and ISO 42001.</li>
<li>Engineering teams proactively incorporate security &mdash; including AI security &mdash; into design and development workflows.</li>
<li>Audit readiness becomes continuous rather than event-driven, with strong evidence pipelines in Drata.</li>
<li>Security is viewed as a strategic enabler of safe innovation, not a bottleneck.</li>
</ul>
You might notice we don't have the typical list of requirements and buzzwords here. That's intentional.

We're looking for proven examples from your career that show you can do this job &mdash; that you've owned penetration testing programs, built vulnerability management systems, implemented security automation, and helped organizations adopt modern technologies (including AI) securely and responsibly.

When you look back a year from now, you'll know you've made OpenSesame more secure, more resilient, and better positioned to innovate with confidence.

Although it should go without saying (but it doesn't), OpenSesame is an equal opportunity employer and we strive to create a welcoming, inclusive environment that celebrates diversity.

Location: This position can be based anywhere in the US. We operate as a remote-first company, and invest in mandatory all-company meetings several times a year in addition to required team travel as necessary.

Performance Driven: We're looking for self-starters with a track record of delivering excellent results, but we're highly selective about who we hire. We don't focus on typical job requirements, instead, we're interested in specific examples from your past experiences. All positions can be based anywhere in the US, and require up to 15 days of travel per year, with senior management and leadership teams requiring up to 35 days.

Compensation: The base salary for this position generally ranges between $130,000 and $160,000, depending on experience. At OpenSesame, we offer a comprehensive benefits package to employees upon hire, including professional development, ISOs, health insurance, 401(k) matching, and paid time off.

Equal Employment Opportunity: OpenSesame is an Equal Employment Opportunity and Affirmative Action employer that values and welcomes diversity. We do not discriminate on the basis of various legally protected characteristics, including criminal history, and strive to provide reasonable accommodations to qualified individuals with disabilities. We prioritize safety and security and may use your information accordingly, and you can contact us for assistance or accommodations during the job application process.

Pay Transparency: At OpenSesame, we prioritize pay transparency, fairness, and equity to create a positive and inclusive work environment, regularly reviewing our compensation practices to align with our values and goals. We provide competitive and fair compensation to our employees based on their skills, experience, and performance.

CPRA (California Candidates): When you submit your application, OpenSesame may collect and use your personal information in accordance with our privacy policy and the CPRA. This may include personal details and employment history, and will only be used for employment-related purposes. We may share this information with third-party service providers, but we will not sell it to third parties. If you have any questions or concerns, please contact us, and for more information on your rights under the CPRA, refer to our privacy policy or the California Attorney General's website.</div>

Senior Security Analyst, Compliance

<div>Job Description:<div></div><div><div> 
GRC Security Analyst</div><div>
Salary: $105,000 - $115,000 DOE</div><div>
Remote: Greenwood Village</div><div></div><div> 
The GMR Cyber Security Governance, Risk, and Compliance (GRC) Specialist will have a strong understanding of GRC concepts and solutions, and ability to adapt to new technologies, processes, and policies. This individual will participate in planning, developing, implementing, and evaluating policies and procedures for GRC cyber security workstreams and projects. They will help document cyber security risks and associated remediation plans for security compliance, support client and internal security risk assessment, contract review, vendor assessment, security exception processing and related project deliverables to IT partners, auditors, and stakeholders. This individual will have broad IT experience, familiarity with cybersecurity application and infrastructure concepts; experience in healthcare is strongly preferred.</div><div></div><div> 
Responsibilities:</div> 
<div></div><ul><li>
Execute activities to support GRC workstreams and related projects for internal and external security assessment, security vendor/supplier assessment, contract and security policy and risk evaluation and exceptions.</li><li>
Assist in performance of risk analyses and remediation requirements through activities such as the following:</li><li><ul><li>
Respond to business and client assessment and audit requests</li><li>
Participate with Integration Management Office or others to respond to RFI/RFP requests</li><li>
Conduct research, document, and evaluate threats, risk impact, risk likelihood, and recommended remediation.</li><li>
Gather technical, administrative, physical security or other enterprise information related to threats, existing controls, and residual risks</li></ul></li><li>
Perform Vendor Risk and Compliance assessments and communicate remediation requirements.</li><li>
Collaborate with Business, Legal, Compliance, IT, client and other stakeholders to oversee review and provide security requirements and revisions for contracts, ISA, and BAA agreements.</li><li>
Partner to create and maintain GMR policies, standards and procedures to safeguard the integrity of and access to GMR systems, files, and data elements and communicate regulatory and security framework requirements.</li><li>
Analyze security policy compliance and development of information security policy exceptions including coordinating interviews, evidence collection and responses from appropriate subject matter experts, and approvals.</li><li>
Partner with GMR security engineers to evaluate and recommend information technology and information security products, services, and processes to reduce risk and maintain compliance with applicable policies, mandates, laws, and regulations.</li><li>
Maintain knowledge of changing technologies, and provide recommendations for adaptation of new technologies, processes, or policies (for example, the use of AI and related security requirements).</li><li>
Assist in development and delivery of required information technology and security awareness training and annual updates for GMR Workforce.</li><li>
Provide GRC and information security expertise and functional delivery for projects, risk analysis, product, vendor RFI/RFP, IMO and regulatory or other initiatives aligned to other GMR organizations. Be the trusted champion of new security technologies.</li><li>
Support GMR audits and Privacy and Compliance programs and other compliance programs as applicable.</li><li>
Progress job knowledge by tracking and understanding emerging security practices and standards, maintaining credentials, participating in educational opportunities, reading professional publications, developing professional networks, and participating in professional organizations.</li><li>
May coordinate work of others, fostering teamwork and cooperation.</li><li>
Perform other security-related duties as assigned</li></ul><div></div><div> 
Education/Licensing/Certification:</div><ul><li>
Bachelor&rsquo;s degree in Computer Science, Information Security and Assurance, Risk Management, Information Systems, Security Engineering or related major. Four years of security related experience can be substituted.</li><li>
CISA, CISSP, or CRISC certification (or passing of test) is preferred.</li></ul><div>
Skills:</div><ul><li>
Knowledge of IT Security Governance, Risk, and Compliance (GRC) concepts and ability to perform risk assessment evaluations.</li><li>
A broad-based understanding of Information Technology, Information Security, and Risk identification and evaluation that spans technical, administrative, physical, and operational security domains.</li></ul><ul><li>
Experience with related domains e.g. Disaster Recovery and Business Continuity, Audit preparation and response, and IT Security and Risk Training, or other.</li><li>
Ability to collaborate with individuals across business and IT domains, and at all levels of the organization.
</li></ul><div> Note &ndash; the next item was missing a bullet.
</div><ul><li>Interprets internal and external business requirements and issues and recommends best practices.</li><li>
Possesses strong analytical ability, consultative skills, strong judgment and the ability to work effectively in a cross-functional, multi-disciplinary, hybrid remote or in person team environment.</li><li>
Ability to adjust to changing priorities and multitask effectively.</li><li>
Ability to assess, comprehend, and communicate complex information including technical and compliance concepts.</li><li>
Requires strong verbal and written communication skills to effectively communicate with all levels of the organization.</li><li>
Proven ability to understand and develop expertise on new regulatory, compliance and security technologies quickly.</li><li>
Well organized with excellent follow up skills and proven ability to meet deadlines.</li><li>
Experience with metrics gathering and reporting processes</li></ul><div></div><div> 
Minimum Required Qualifications</div><ul><li>
A minimum of 2 years of experience related to areas of position responsibilities</li><li>
A minimum of 2 years information security work experience</li><li>
GRC Healthcare Industry experience strongly preferred</li><li>
Working knowledge of compliance frameworks, security and privacy management standards and related certifications e.g., NIST CSF,800-171 and 800-53, NIST AI Framework, FedRAMP, HIPAA, HITRUST, PCI DSS, IT General Controls (ITGC), SOC2, ISO 27001, COBIT or others</li><li>
Experience with Cloud based IT Security concepts and solutions</li><li>
Experience performing risk assessment tasks, and risk assessment platforms and tools e.g., Allgress, RSA Archer, CORL Toolkit, or other</li><li>
Exposure to Identity, Credential, and Access Management (ICAM) platforms, tools and concepts is helpful</li></ul></div><div></div><div><div><div> 
Why Choose GMR? Global Medical Response (GMR) and its family of solutions are dedicated to delivering compassionate, quality medical care, primarily in the areas of emergency and patient relocation services. Here you&rsquo;ll embark on meaningful work that will make an impact on you and the customers we serve. View the stories on how our employees provide care to the world at www.AtaMomentsNotice.com.</div><div> 
GMR&rsquo;s Core Behaviors&mdash;keep care at the center, raise your hand, seek to understand, find a way together and be accountable&mdash;unite our teams and set us apart in emergency medical services.</div></div></div>
EEO Statement:

Global Medical Response and its family of companies are an Equal Opportunity Employer, which includes supporting veterans and providing reasonable accommodations for individuals with a disability.
More Information about this Job:
<div>
Check out our careers site benefits page to learn more about our benefit options.</div></div>

Security GRC Security Analyst

Argon Tech

We are looking for an Information Security &amp; Compliance Specialist with hands-on experience in ISO 27001 implementation and security controls. The ideal candidate will have strong expertise in ISMS documentation, compliance frameworks, and cloud security fundamentals.RequirementsMust Have<ul><li>Hands-on ISO 27001 implementation experience, including at least one full certification cycle</li><li>Working knowledge of NEN 7510 or comparable security standards</li><li>Ability to independently create ISMS documentation including policies, procedures, risk assessments, and SoA</li><li>Cloud security fundamentals (AWS, Azure, or GCP) including IAM, encryption, and logging</li><li>Experience with vulnerability scanning tools (Nessus, Qualys, or equivalent)</li><li>Understanding of GDPR / AVG compliance requirements</li><li>Strong written English and documentation skills</li></ul>Nice to Have<ul><li>ISO 27001 Lead Implementer, CISM, or CISSP certification</li><li>Experience securing SaaS platforms and API security</li><li>Familiarity with GRC tools such as Vanta, Drata, or Secureframe</li><li>Background in healthcare, HR-tech, or similar domains</li></ul>Application Question(s):<ul><li>Please share your current salary and expected</li><li>Availability for a screening call ?</li></ul>Experience:<ul><li>Information Security &amp; Compliance: 2 years (Preferred)</li></ul>Work Location: Remote

Information Security & Compliance Specialist

Search 10000+ Security and compliance analyst jobs near you this April. New roles added regularly across leading industries. Apply today.