Sr GRC Analyst

Jd

Perform vendor risk assessments against all security domains

Perform technical implementation assessments from a security perspective related to vendor integrations (i.e. API integrations, SFTP integrations, etc.) to validate the secure implementation of the third party service at PANW

Maintain and expand Customer Trust knowledge base

Support PANW customer security assessment requests

Support PANW customer audits

Skills

Excellent understanding and practical application of industry security frameworks including SANS Critical Security Controls, CIS Controls, ISO 27001, NIST SP 800-53, PCI DSS, and SOC2.

Great understanding of IT control frameworks (COBIT) and IT general controls

Strong knowledge of information security concepts, risk and controls concepts

Strong knowledge of standards such as ISO 27001/2, NIST CSF, NIST 800-53, TSC 2017 (SOC2), PCI DSS, etc. Ability to configure and/or maintain 3rd party vendor risk management tools (such as OneTrust vendor assessment or a similar tool ) for third party risk assessments is a plus

One or more certifications such as CISSP, CISA, CISM, CEH, ISO 27001 Lead Auditor and Lead Implementer

Bachelor’s Degree in Technology or Risk Management

CISA/ CISM/CISSP certification, ISO 27001 (Lead Auditor) preferred

Rachael

IT Services | Development | Staffing

URL: http:/www.sidramtech.com |

Email: rachael@sidramtech.com

Direct: 4705239688

Led by 25+ Years of Industry Experience

E-Verify® is a registered trademark of the U.S. Department of Homeland Security.

SIDRAM TECHNOLOGIES participates in the Employment Eligibility Verification Program (E-Verify) offered by USCIS.

www.dhs.gov/E-Verify

SIDRAM TECHNOLOGIES

New Jobs

Sr GRC Analyst - w2