IT Security Risk Analyst - Oklahoma City...

Under senior staff supervision, assist in information security policy development, maintenance and auditing; security policy education, training, and awareness activities; monitor compliance with security policy and applicable law. Participate in risk assessment reviews, and assist with audit/compliance activities., + Review policies and procedures related to Information Security and regulatory compliance.

• Engage in IT SOX, ISO 27001/2, and other compliance activities.

• Assist in implementation of SANS 20 Critical Security Controls.

• Participate in risk assessments for projects.

• Engage in process review and improvement, document as required.

• Be prepared to deliver security awareness and policy training.

• Actively seek to expand individual skills through research, training, and collaboration with peers.

• Monitor information security news for emerging threats, technologies, and regulations that could have an impact on the security of Client’s processes, systems, and applications.

• Update job knowledge by participating in educational opportunities; reading professional publications; maintaining personal networks; participating in professional organizations.

• Work flexible hours, including weekends and evenings.

• Availability to respond to emergency situations.

• Perform additional duties and assignments as requested.

• Bachelor’s Degree required, CS, MIS or related field preferred

• Industry Certification (ISACA, ISC2, GIAC) highly preferred

• Experience with SOX/SOC/ISO/Privacy Shield/GDPR compliance highly preferred

Experience Required:

• 3 years of IT risk management, IT audit or regulatory compliance, business continuity, and/or policy and procedure experience

Knowledge/Skills/Abilities:

• Information security standards such as ISO 27001/2, SANS 20 Critical Controls

• Strong analytical and problem solving skills

• Excellent written and verbal communication skills