Quick overview
SeniorityMid Senior
Work modeHybrid
LocationFoster City, CA, United States
Job description
Role Name: Information Security Governance Analyst
Location: Foster City, CA - 94404
Duration: 6 -12 Months
This role is responsible for ensuring organizational compliance with information security governance, risk, and compliance (GRC) frameworks. The analyst will lead compliance initiatives, security assessments, risk evaluations, and continuous improvement activities across the enterprise.
Compliance Activities
- Develop and implement security management systems to track objectives and controls.
- Plan and lead security audits to ensure compliance with frameworks such as NIST 800-53, NIST CSF 2.0, ISO 27001, and related standards.
Risk Assessments
- Conduct risk exposure assessments to identify threats and vulnerabilities.
- Perform comparative risk assessments to evaluate solution alternatives and security impacts.
Qualifications-
- 5+ years of experience conducting security assessments or audits (8+ years expected for L5 candidates).
- 5+ years of experience with security frameworks and privacy regulations including ISO 27001, NIST, GDPR, CCPA, and CPRA (8+ years expected for L5 candidates).
- Strong knowledge of GRC frameworks, methodologies, and tools.
- Proficiency in risk assessment methodologies and risk management practices.
- Familiarity with AI/ML technologies including Large Language Models (LLMs).
- Working knowledge of vulnerability scanners, file integrity monitoring, configuration monitoring, firewalls, routers, web proxies, and intrusion prevention technologies.
- Excellent analytical, critical thinking, communication, and collaboration skills.
- Experience in automotive, aerospace, ICS/SCADA, or other high-assurance environments is beneficial.
- Bachelor’s degree in Computer Science, Information Systems, Business, or related field, or equivalent experience.
CERTICATIONS- BONUS
CISA • CISM • CRISC • CISSP
Similar jobs
- BF
Cyber Threat Remediation AnalystRecently posted
BC Forward · Phoenix, Arizona · Hybrid 🇺🇸
Stakeholder ManagementMicrosoft ExcelTableau+8Technology$50/hr - BS
Sr. Electronic Security EngineerRecently posted
BERING STRAITS TECHNICAL SERVICES LLC · Huntsville, Alabama · On-site 🇺🇸
TechnologySalary not listed - CO
Network Security EngineerRecently posted
ComTec · Northborough, Massachusetts · On-site 🇺🇸
iOSTechnologySalary not listed - CA

Security Operations Engineer IIRecently posted
Credit Acceptance Corporation · San Francisco, California · Hybrid 🇺🇸
WAFTechnology$101.6k - $142.2k/yr - HG

Security AnalystRecently posted
HTC Global Services Inc · Columbia, South Carolina · On-site 🇺🇸
Active DirectoryTechnologySalary not listed - CR

Senior Security Solutions EngineerRecently posted
Continental Resources · Bedford, Massachusetts · Hybrid 🇺🇸
AWSMFAOAuth+12Technology$155k - $175k/yr - CR

Associate Security EngineerRecently posted
Continental Resources · Bedford, Massachusetts · Hybrid 🇺🇸
TechnologySalary not listed - HT
Cyber SecurityRecently posted
Horizontal Talent · Maplewood, MN · Remote 🇺🇸
Technology$22 - $46/hr - QT

Cyber SecurityRecently posted
QUANTUM TECHNOLOGIES LLC · Houston, TX · Hybrid 🇺🇸
Zero TrustIAMTechnology$85/hr - VS
WAF / Akamai Security EngineerRecently posted
Vigna Solutions Inc. · Milton, GA · On-site 🇺🇸
Stakeholder ManagementSQLOWASP+3TechnologySalary not listed - AC

Senior Associate Cybersecurity Consultant Auto Apply
Acrisure Cyber Services · United States · Hybrid 🇺🇸
AWSPCI DSSCompliance+6TechnologySalary not listed - VE

Sr. Director, Global Cybersecurity
Vertiv · Westerville · Hybrid 🇺🇸
ComplianceContinuous ImprovementTechnologySalary not listed