us improvement of the organization's security and compliance posture.

Key Responsibilities:

Conduct control assessments to identify and evaluate IT and information security risks
Maintain documentation for policies, standards, procedures, and risk assessments
Coordinate penetration tests, vulnerability scans, and track remediation actions to closure
Assist in continuous improvement and maturation of the Information Security GRC program
Maintain the risk register and track risk response plans for timely closure
Perform audits and assessments of third parties including vendors and service providers
Collaborate with Technology and Security teams to develop remediation action plans

Minimum Requirements:

2+ years of experience in information security, IT audit, or IT risk and compliance
Knowledge of compliance frameworks such as COSO, COBIT, NIST, ISO 27001
Understanding of IT general controls and compliance initiatives including SOC1, SOC2, HIPAA, HITRUST, GDPR, FEDRAMP
Familiarity with IT and information security technologies such as IAM, vulnerability management, encryption, logging and monitoring, and application security
Knowledge of cloud and SaaS-based environments and auditing methodologies
Relevant certifications like CISSP, CISA, CRISC, ISO 27001 Lead Auditor/Implementer are desirable

1a:T655,Securonix is transforming how security operations are delivered, measured, and scaled. Our Unified Defense SIEM combines SIEM, UEBA, SOAR, TIP, and TDIR in a single cloud-native platform that helps security teams detect threats faster, investigate with context, and respond with precision. No more silos. No more guesswork.

We do more than unify the SOC. We improve its economics. With outcome-based pricing, modular automation, and full control over data pipelines, customers reduce storage and compute costs by up to 50 percent. Analyst effic

Security Risk and Compliance Analyst I