Information Security Analyst

Hi Greeting,

I hope you're doing well. I'm Naveen from DewSoftware, and we have an exciting open position that may interest you. Please share your updated resume, and I'll reach out to schedule a convenient time to connect.

Job title: Information Security Governance, Risk & Compliance (GRC) Analyst

Location: Boston, MA (Hybrid 1–2 days onsite)

Duration: Long term contract

Job Description

seeking an Information Security Governance, Risk & Compliance (GRC) Analyst to support the execution of its Information Security Governance, Risk, and Compliance program across the US affiliate.

Required Skills and Qualifications

• Minimum 3 years of experience in information security, cybersecurity governance, IT risk management, compliance, audit, or related disciplines.
• Bachelor's degree preferred in Cybersecurity, Information Technology, Information Systems, Business, Risk Management, or a related field.
• Working knowledge of cybersecurity and risk frameworks, including:
• NIST CSF 2.0
• ISO 27001
• CIS Controls
• PCI
• SOX
• FAIR
• Experience supporting risk assessments, compliance reviews, audits, control assurance, third-party reviews, or remediation tracking.
• Strong written communication skills.
• Ability to develop clear documentation, reports, procedures, and stakeholder-ready materials.
• Strong analytical and organizational skills.
• Attention to detail and ability to manage multiple priorities.

Preferred Certifications

• CompTIA Security+
• GSEC
• SSCP
• CISA
• CRISC
• Similar relevant certifications.