Information Security Governance, Risk and Compliance Analyst

About this kind of role

What a Information Security Governance, Risk and Compliance Analyst usually does. The employer's own details are in the listing.

Typically does: Develops, implements, and maintains information security governance frameworks, risk management programs, and compliance initiatives. This role assesses security risks, identifies vulnerabilities, and recommends mitigation strategies to protect organizational assets. They monitor regulatory changes and industry best practices to ensure ongoing compliance with relevant laws and standards. Activities often include conducting security audits, developing security policies, and providing training to employees.

Tools and skills: Proficiency in risk assessment methodologies, security frameworks (like NIST, ISO 27001), compliance regulations (such as GDPR, HIPAA), and security information and event management (SIEM) systems is generally required.

Good fit for: Individuals with strong analytical skills, attention to detail, and a solid understanding of information security principles often thrive in this role.