AX-14 Sr. Associate, Information Security Governance, Policy & Control

Job Summary

Oceans Code Experts is looking for a Senior Associate in Information Security Governance, Policy & Control to join our team. This role involves working with technologies such as GRC, Risk Management, and Security Controls, requiring at least 5 years of experience. As a Senior Associate, you will be responsible for advanced verbal and written communication, organization, and self-motivated learning.

Job Responsibilities

• Demonstrate advanced verbal and written communication skills
• Utilize industry standard frameworks for information security risk management, assessment, audit, and controls (e.g., NIST, ISO, COSO, HiTrust, CMMC)
• Ensure compliance with regulatory requirements (e.g., PCI, GDPR, HIPPA, Privacy, CCPA)
• Utilize GRC tools and technologies to support assessment/audit processes (e.g., RSA Archer, Security Scorecard, Risk Recon)
• Identify weaknesses in security controls by gathering information from various sources
• Design, develop, implement, and monitor security controls
• Have expertise across multiple information security domains

Job Requirements

• Bachelor's degree in Computer Science, Engineering, or related field, or equivalent work experience
• CISA, CRISC, CISM, or CISSP certifications preferred
• 5+ years of experience in information security governance, policy, and control
• Advanced English proficiency, written and spoken
• Experience with security control design, development, implementation, and monitoring
• Knowledge of software engineering best practices
• Strong collaboration and communication skills
• Experience with Git, API integration, and testing

Nice to Have

• Demonstrated experience across multiple information security domains
• Experience with information security risk management frameworks
• Experience with regulatory requirements (PCI, GDPR, HIPPA, etc.)
• Experience using GRC tools and technologies

Position Type and Expected Hours of Work

• Full-time consulting position
• Up to 40 hours per week
• Flexible core hours
• Hybrid