M365 Security Architect

Job Description: We are looking for an experienced GRC Security Analyst to support our Information Security Governance, Risk, and Compliance initiatives.

The ideal candidate will have experience in security risk assessments, compliance audits, policy management, and regulatory frameworks.

• Perform security risk assessments and identify remediation plans.
• Support GRC programs, including governance, risk management, and compliance activities.
• Develop, review, and maintain information security policies, standards, and procedures.
• Support internal and external security audits.
• Ensure compliance with frameworks such as NIST, ISO 27001, SOC 2, PCI-DSS, HIPAA, and GDPR .
• Track security risks, issues, exceptions, and remediation activities.
• Conduct third-party/vendor risk assessments.
• Work with IT, security, audit, and business teams to address compliance gaps.
• Prepare security compliance reports and documentation for stakeholders.

• 8+ years of experience in Cybersecurity GRC .
• Strong experience with risk assessments, audits, and compliance .
• Knowledge of NIST CSF, NIST 800-53, ISO 27001, SOC 2, PCI-DSS, HIPAA, and GDPR .
• Experience with GRC tools such as ServiceNow GRC, Archer, OneTrust, or MetricStream .
• Experience with vendor/third-party risk management.
• Strong documentation and communication skills.

• CISA
• CRISC
• CISSP

For applications and inquiries, contact:View email address on us.fitly.work