Senior IT GRC Analyst

Description

• Lead third-party risk assessments for new and existing vendors, including security questionnaires, SOC report reviews, risk scoring, and reporting.
• Collaborate with stakeholders in Legal, Finance, and Information Technology to ensure vendor contracts meet security and compliance requirements.
• Communicate and drive change through clear articulation of risk findings and recommendations to both technical and non-technical audiences.
• Maintain and enhance our third-party risk management framework aligned with industry standards and requirements, such as ISO 27001, SOC 2 Type 2, PCI-DSS, and Sarbanes-Oxely.
• Utilize GRC toolsets and streamline processes and manage the assessment, tracking, reporting, and monitoring of our third-party information security supply-chain at scale.

Requirements

• Certifications such as CISA, CISM, CISSP, CRISC, or ISO 27001 Lead Implementer
• Strong communication, analytical, and project management skills.
• Familiarity with SaaS governance and best practices.
• 5+ years of experience in Information Security, Risk Management, or GRC roles with a strong focus on third-party/vendor risk.
• A track record of commitment to prior employers
• Bachelor’s degree from an accredited, not for profit university or college (preferably in Information Systems, Cybersecurity, or a related field).
• Experience supporting compliance audits and client security questionnaires.
• Deep understanding of ISO/IEC 27001, with experience developing control sets and the application of those control sets within a fast-paced corporate environment.
• Experience with GRC platforms such as Hyperproof, OneTrust, Drata, etc.
• Fluency in SOC 2 Type 2 and SOC 1 Type 2 reports, SIG, CSA CAIQ, particularly with regards to the utilization of these artifacts in the context of a risk assessment.

Benefits

• 401(K) retirement plan with matching contributions
• Complimentary gourmet coffee, tea, hot chocolate, fresh fruit, and other healthy snacks
• Comprehensive healthcare coverage: Medical / Vision / Dental / Prescription Drug
• Tuition reimbursement
• Commuter and parking benefits
• Access to CoStar Group’s Diversity, Equity, & Inclusion Employee Resource Groups
• Virtual and in person mental health counseling services for individuals and family
• Life, legal, and supplementary insurance
• Employee stock purchase plan
• Paid time off
• On-site fitness center and/or reimbursed fitness center membership costs (location dependent), with yoga studio, Pelotons, personal training, group exercise classes

Training + Development

Interview process

Visa Sponsorship

Security clearance