Information Security Analyst - GRC

About the position Bring your talents to Sentry's Information Security Governance, Risk, and Compliance team. As a member of the Information Security GRC team, you will have the opportunity to make a direct and immediate impact on our business and customers by focusing on Compliance. Responsibilities • Review and understand fundamental regulations and frameworks related to cybersecurity and manage Sentry's security documents and applicable processes to be in alignment with them. • Focus on developing and testing of Information Security controls and confirm compliance. • Lead in conducting security risk assessments to identify concerns and ensure compliance to Sentry's security documents by gathering data, analyzing effectiveness of controls, collaborating with internal and external parties, and evaluating risk magnitude. • Work with stakeholders across the organization to remediate security issues, build information security controls and maintain governance processes. • Manage risk and support our associates' compliance to Sentry's policies, standards, and applicable regulatory requirements. • Write and publish Sentry's security policies, standards, and applicable supporting documentation. • Maintain the inventory of information security controls, exceptions, and test evidence to ensure the risks associated with non-compliant controls are sufficiently managed. Requirements • Bachelor's Degree in related field (e.g., Information Security, Computer Information Systems, Information Technology, or Project Management) or equivalent work experience. • Minimum of 2 years related work experience in Information Security, IT/IS Audit, Security Governance, Risk, Compliance, or a related field. • Familiarity with industry security standard frameworks and cybersecurity compliance regulations (e.g., PCI, ISO 27001/27002, NYDFS, WI Data Security Act). • Successfully completed or able to work towards a security certification (e.g., CISA, CRISC, CISSP, PCI ISA, Security+, etc.). • Experience with security domains (e.g., Identity and Access Management, Security and Risk Management, Compliance, Organization of Information Security, Cryptography, Security Assessment and Testing, etc.). • Able to work independently and collaboratively as part of a diverse, distributed team in an Agile environment. • Strong analytical, problem solving, and conceptual thinking skills. • Proven interpersonal, communication, writing, and meeting facilitation skills. Benefits • Flexibility through a scheduled Hybrid work model (Monday and Friday work from home, Tuesday through Thursday in office). • In-office workspace and materials for home office provided, including a laptop and additional equipment. • Meal Subsidy available for associates who report to an office. • 401(K) plan with a dollar for dollar match on your first eight percent, plus immediate vesting. • Tuition Reimbursement program and career development through Sentry University (SentryU). • Generous Paid-Time Off plan and Volunteer-Time off. • Group Medical, Dental, Vision, Life insurance, Parental leave, and Health and Wellness benefits. • Well-being and Employee Assistance programs. • Sentry Foundation gift matching program to encourage charitable giving. Apply tot his job