IT Security Analyst - GRC

Overview

Lifeway is seeking an IT Security Analyst – GRC to guide day-to-day IT security governance, risk management, and compliance across the organization. You'll support third-party risk assessments, PCI compliance efforts, and internal risk reviews that help protect customer and ministry data.

Why Lifeway?

Lifeway is a place where you can bring your faith and work experience to join in the most important mission in the world: making disciples of Jesus Christ. Whether you’re a creator or storyteller, data guru or problem-solver, or anywhere in between, if you’re passionate about serving the church, we have a place for you. Lifeway has a strong Work from Anywhere (WFA) culture that is deeply focused on our mission and values. While headquartered in Nashville, TN, many of our positions are remote-eligible and have autonomy and flexibility with work hours. We provide equipment and resources to ensure team members have access to a productive and ergonomic workspace. We believe building relationships and community is essential to how we work together, so Lifeway hosts all-team meetings several times per year and provides travel for key team gatherings for remote-based team members. Full-time employees are eligible for enrollment in our comprehensive benefits plans including healthcare, vacation and sick time, holiday pay, care days, 401(k) plan, maternity and parental leave, adoption assistance, mission trip time, and more. If this sounds like a place where you would be excited to serve the kingdom of God, we would love for you to join our team.

Learn more about our culture at team.lifeway.com/culture-code

This is a remote position in the U.S. with occasional travel to Nashville for in-person team gatherings. #LI-Remote

Responsibilities

• Lives out Lifeway’s mission and values, showing deep commitment to Kingdom work
• Limited travel: 2-4 times per year, typically overnight
• Support third-party risk management (TPRM) assessments and maintain the overall TPRM program
• Put security systems and programs in place to manage vulnerabilities
• Use industry frameworks to support governance and risk management across technology systems and processes
• Support IT compliance and risk assessments, including PCI scans, assessments, remediation, and Right to Be Forgotten requests
• Perform internal risk assessments to confirm Lifeway's practices are secure and meet PCI and other standards and regulations
• Contribute to developing and maintaining security policies, standards, and procedures
• Collaborate with internal and external departments on projects

Qualifications

Education

Bachelor's degree in computer science, cybersecurity, information technology, or a related field, required

Master's degree in computer science, cybersecurity, information technology, or a related field, preferred

Advanced graduate degree (PhD, etc.), not required

Skills, Knowledge, & Experiences, required

• Ability to travel to the Middle Tennessee area 2-4 times annually for team gatherings
• 3–5 years of IT risk, audit or compliance experience
• 1–2 years of experience performing assessments and/or audits, and identifying and addressing security control gaps, abnormal behavior patterns, and attack techniques
• Working knowledge of risk assessment and IT auditing methods
• Working knowledge of security frameworks (NIST-CSF, PCI-DSS, MITRE, OWASP)
• General knowledge of security domains and cloud security concepts, and familiarity with vulnerability assessment tools

Actively involved in an evangelical Christian church

Skills, Knowledge, & Experiences, preferred

• Security+ or CISSP certification
• CISA or CISM certification
• GIAC, CCSK, or CCSP certification