We are looking for an experienced Sr. Information Analyst to support IT risk, governance, and compliance initiatives in Hackensack, New Jersey. This role focuses on strengthening security and privacy practices by evaluating control environments, identifying compliance gaps, and helping align internal standards with recognized regulatory and industry frameworks. The ideal candidate will work closely with cross-functional teams, communicate findings to leadership, and contribute to awareness programs that improve organizational readiness and accountability.
Responsibilities:
- Support the development and rollout of security and compliance policies, standards, and operating procedures that align with established global governance frameworks.
- Perform risk reviews, vulnerability evaluations, and gap analyses to uncover control weaknesses and recommend practical remediation steps.
- Help implement and validate controls designed to meet applicable U.S. federal regulatory expectations and broader compliance obligations.
- Participate in audit and assessment activities, including controls testing, internal reviews, and privacy-focused evaluations, then document findings and improvement opportunities.
- Partner with business and technical teams to coordinate compliance efforts, track action items, and promote consistent risk management practices.
- Create clear reports, scorecards, and dashboards that summarize compliance status, key risks, and progress for senior leadership.
- Contribute to security awareness efforts by helping develop training content, simulated exercises, and digital learning materials for employees.
- Analyze participation data, feedback, and performance metrics to measure training effectiveness and support ongoing program enhancements.
- Certified Information Systems Auditor (CISA) credential required.
- Hands-on experience in governance, risk, and compliance (GRC) within an information technology environment.
- Strong knowledge of IT general controls (ITGC) and control assessment methodologies.
- Familiarity with infrastructure security principles, risk identification, and technical control evaluation.
- Experience supporting audits, compliance reviews, and control testing across security and privacy domains.
- Ability to interpret regulatory requirements and translate them into practical policies, procedures, and control improvements.
- Strong written and verbal communication skills, including the ability to present findings and recommendations to leadership.