GRC Security and Access Governance Analyst

📋 Description

• Conduct risk assessments to identify threats and vulnerabilities
• Design and maintain access governance for least-privilege access
• Oversee user provisioning, deprovisioning, and access changes
• Run periodic access reviews and certify appropriate privileges
• Ensure compliance with SOC2, ISO 27001, GDPR/CCPA and SOX
• Assist IAM systems (Okta, ConductorOne) and automate processes

🎯 Requirements

• 3+ years in a GRC or information security role
• Experience with Identity and Access Management tools
• Experience applying SOX access control principles
• Knowledge of risk management frameworks
• Bachelor's degree in Information Security, CS, or related field (or equivalent)
• Certification in CISA or CISSP preferred

🎁 Benefits

• Health, vision, and dental care
• Equity ownership
• Life and AD&D, short- and long-term disability
• Employee Assistance Program
• Employee Resource Groups
• Unlimited PTO
• 401K with company match