Information Security Analyst

Our focused technology areas: Data & Analytics (Data Architecture, Data Engineering, Data Migration, Data Modernization, Big Data, Analytics and BI) Cloud (Cloud Computing, Cloud Migration, Cloud-Native Architecture, Hybrid and Multi-Cloud) Quality Engineering (Manual Testing, Non-functional testing, Test Automation, Digital Testing) Our focused industries and target segments: Manufacturing, Transportation, & Logistics Energy & Utilities Telecom & Media Government & Public Sector (FED, SLED, & Partners) Hi-Tech Job Description Object Technology Solutions, Inc (OTSI) has an immediate opening for a Sr. Information Security Analyst - GRC Sr. Information Security Analyst – GRC (Cary, NC- Onsite) Other Location: Overland Park, KS - Onsite MAJOR RESPONSIBILITES: Proven experience reviewing client contractprovisions related to data security, breach reporting, cyber resilience, andcompliance certifications and measuring compliance in IT and securityarchitecture and operations. Regulatory Compliance Risk Management Support independent certification and audit byworking with D&IT peer groups and lines of business to collect documentationand evidence of security policies and operations Request and review documentation and evidencefrom control owners to certify and validate compliance to standards andindustry-accepted best practice Monitor regulatory and legal landscape at aglobal scale and across market sectors and maintain awareness of compliancerequirements Act as an informed voice in development ofpolicy and ensure alignment with regulatory, legal, and contractualrequirements Assist establishment and enforcement ofstandards of practice documentation to be referenced by architecture andoperations teams Contribute process and subject matter expertisein governance forums and cross-functional committees Support establishment, collection, and ongoingimprovement of metrics to measure effectiveness of cyber risk management andprovide data-driven insight to decision makers and control owners Collaborate with peer D&IT groups tocollect KPI’s, KRI’s and drive efficiency through automation and other means Supplier/Third Party Risk Management Contribute subject matter expertise throughthird party risk assessment process Identify and communicate risk of vendorengagements and mitigation actions to business owners and D&IT stakeholders Assist review of client security requirementsin contracts and aggregate relevant clauses to inform contractual risk Assist development of user training alignedwith cyber threat landscape, establish and implement metrics, and proposeenhancements Assist with securitycertification/attestations/audits to demonstrate control effectiveness toindependent service auditors/assessors and C3PAO’s Assist in development of risk treatment plansand monitoring progress of actions. Collaborate with members of the GRC team toensure timely and quality deliverables to internal and external customers Contribute subject matter expertise in reviewand response to internal and external sourced GRC related requests SKILLS AND ABILITIES REQUIRED: Bachelor’s degree in information systems,Information Security, or a related field 7–10 years of experience in GRC executing orauditing against standards, frameworks, and industry regulations Demonstrated experience supporting GRCfunctions for global companies Solid proficiency in risk assessmentmethodologies and frameworks Proven ability to assess alignment of internalpolicy, process, control design and operations, and cyber risk management withregulatory standards and frameworks Strong collaboration with IT teams Familiarity with industry standards andframeworks (e.g., NIST CSF and supporting SP’s, ISO 27001, AICPA SOC) Working knowledge of cyber and privacy laws andregulations Solid understanding of information securityprinciples and concepts Strong desire to create task and functionalefficiencies through use of technology and tools, especially GenAI Preferred Qualifications Strong analytical, organizational, andcommunication skills Professional certifications such as CRISC,CISSP or others Experience with ServiceNow Risk Managementplatform Knowledge of FAR, DFARS, CMMC Experience with GRC platforms and riskmanagement methodologies Ability to work independently andcollaboratively as required Attention to detail and critical thinking Ethical judgment and integrity Ability to manage multiple tasks and deadlines Strong interpersonal and stakeholder engagementskills About us OTSI is a global technologypartner providing enterprise IT consulting, digital solutions, and managedservices. We help organizations modernize complex technology landscapes,harness the power of data, and build scalable AI-led ecosystems to accelerate innovationand business growth. With over 26 years of experience, we consistently turncomplex challenges into success stories through our strong technicalcapabilities and deep industry knowledge. Our global team of 1,800+professionals, spread across 6 countries, delivers cutting-edge solutions forcustomers across Banking, Financial Services, Insurance, Transportation &Logistics, Energy & Utilities, Healthcare & Life Sciences, Government,Hi-Tech, Telecom & Media, Manufacturing, and more. Our focused technologyareas: Data & Analytics (Data Architecture, Data Engineering, Data Migration, Data Modernization, Big Data, Analytics and BI) Cloud (Cloud Computing, Cloud Migration, Cloud-Native Architecture,Hybrid and Multi-Cloud) Quality Engineering (Manual Testing, Nonfunctional testing, TestAutomation, Digital Testing) Our focused industries andtarget segments: Banking, Financial Services, & Insurance Energy & Utilities Healthcare & Lifesciences Government & Public Sector (FED, SLED, & Partners) #J-18808-Ljbffr