Job Description

MatchPoint Solutions is a fast-growing, young, energetic global IT-Engineering services company with clients across the US. We provide technology solutions to various clients like Uber, Robinhood, Netflix, Airbnb, Google, Sephora and more! More recently, we have expanded to working internationally in Canada, China, Ireland, UK, Brazil and India. Through our culture of innovation, we inspire, build, and deliver business results, from idea to outcome. We keep our clients on the cutting edge of the latest technologies and provide solutions by using industry specific best practices and expertise.

We are excited to be continuously expanding our team. If you are interested in this position, please send over your updated resume. We look forward to hearing from you!

Title: GRC Analyst

Duration: 6+ Months

Location: Remote

Rate: $35/hr - $40/hr

Job Description: GRC Analyst

Position Summary: The Governance, Risk, and Compliance (GRC) Analyst is a critical role within the organization, responsible for supporting the security direction of the business and enhancing the company's security posture.

Essential Job Duties:

• Work on Requests for Information (RFIs) with the sales team meeting tight deadlines and business requirements.
• Conduct contract reviews, including security exhibits and Data Processing Agreements (DPAs) for customers and vendors in collaboration with legal.
• Participate in ISO 27001 audits, preparation, evidence collection and walkthroughs.
• Conduct enterprise-wide, ongoing risk analysis in collaboration with compliance and security teams.
• Refine current policies, standards, and procedures to ensure they adapt to evolving business needs and risk profiles.
• Work on annually updating policies, procedures and standards in conjunction with other stakeholders.
• Meet client requirements and answer inquiries coming from customers about security and technology.
• Maintain oversight in a GRC-related platform.

Skills and Experience:

• At least 3+ years of experience in cybersecurity, compliance, or risk management.
• Strong business acumen and security technology skills.
• Experience and understanding of various regulatory requirements and laws, including but not limited to SOC 2, SOX, GDPR, ISO 27001/2, ISO 27701 or NIST.
• Exceptional written and verbal communication skills.
• Capacity to understand legacy and progressive technology and security controls.
• Up-to-date understanding of incident response, system configuration, vulnerability management, and hardening guidelines.
• Prior team leadership experience preferred.

Job Tags

Similar Jobs