Description: e-telequote insurance where passion meets purpose
The e-telequote information security analyst is an integral part of the information security teamCandidates in this role will perform multiple tasks within the grc frameworksThis includes leading it risk assessments, third party risk assessment, compliance audits and information security policy and procedure governanceThe position requires expert knowledge of information security principles, best practices, and control frameworks (cobit, sox, hitrust, etc.)
Proposed hybrid work environment – 90% remote, ~10% office/travelRequirements:
Essential duties and responsibilities:
Meet with technology managers to determine security requirements that exceed all standards
Develop process and procedures exceeding all compliance and governance standards to ensue we exceed all metrics and can pass/maintain hitrust certificates
Provide and lead risk assessments for it, third-party and compliance audits
Lead internal risk assessments
Develop it controls, policies, and processes
Coordinate efforts with data asset owners and business stakeholders to identified risks and develop remediation plans
Conduct it controls reviews to ensure control effectiveness against industry standards; for example, sarbanes-oxley and hitrust.
Education and/or work experience requirements:
B.s or b.a in information security; or equivalent work experience
5+ years of work within grc roles
Qualification/skill requirements:
Subject matter expertise with one or more control frameworks
One or more industry recognized security certifications – cissp, cisa, cism
Effective verbal and written communications skills
Outstanding analytical, problem-solving, and communication skills
Experience with log management or security information management tools
Excellent organizational and time management skills.
Self-driven, flexible, and innovative with a passion for technology and development
