Information Security GRC Analyst

· Work Location: Role is 100% Remote. Preference will be given to local candidates who can come to the office as needed for client and departmental meetings, trainings, and other onsite activities.

· 10+ Years of Experience in Information Security and Compliance.

· 2+ Years of Experience with security audits based on a standard control set as an auditor or responding information system security officer

· Must Have a Strong Working Knowledge of NIST 800-53 (2 Years of Experience)

· Prior Experience POA&M or CAP.

· Strong Communication Experience.

· Experience With Using A GRC Tool (Archer or Similar) (3 Years of Experience)

· Education - Bachelor’’s Degree - field of study is open, but the degree must be complete and verifiable

Preferred Skills

· Have completed an information security plan or system security plan notebook.

· Simultaneously, manage multiple infosec work efforts.

· Knowledge of IRS 1075, HIPAA, CJIS, MARS-E and/or PCI-DSS.

· Government sector experience

· Certification - CISA, GSLC, or equivalent certification

· Why is this position open: New Position to assist DIS with the execution of its responsibilities under the statewide information security program.