Information Security Governance, Risk and Compliance Analyst
1 day ago
We're looking for an Information Security Governance, Risk & Compliance Analyst to join our growing Information Security team. This role will be reporting to the Manager of Information Security Governance, Risk & Compliance. Our security team works to create a strong Information Security function within GTI that enables the business to continue its tremendous growth. The Information Security Governance, Risk & Compliance Analyst is responsible for maintaining continuous compliance with security policies, industry laws, and regulations (HIPAA, SOX, NIST, etc.). The candidate must communicate effectively with business partners and team members to help raise the level of security awareness, security compliance, and security risk. The candidate will perform environment-specific risk assessments factoring in both qualitative and quantitative risks and assist with the deployment of various controls based on those assessments. This role will also involve ongoing monitoring and improvement of security governance, ensuring a proactive approach to risk management.
The role is based out of our Chicago, office. While the role is primarily remote, you need to live in the Chicagoland area and commute to the office on an as needed basis.
ResponsibilitiesOwn the relationship working with IT and business stakeholders to perform ongoing internal and vendor risk assessments, providing reporting to stakeholders, and ensuring appropriate action is taken. Update and track KPIs from the Information Security risk register and work with stakeholders on developing Corrective Action Plans to address risks. Provide guidance to newer staff working with internal IT stakeholders for vulnerability management, ensuring vulnerabilities are remediated in accordance with policy and SLAs. Own the process for working with IT and business stakeholders to perform ongoing compliance reviews in line with security policies, information security regulations (HIPAA, SOX/ITGC), and security frameworks (NIST, MITRE, etc.). Assist with ongoing internal operations and tasks, including ITGC security reviews. Spearhead the ongoing internal and external SOX and HIPAA audits and other security audits that are relevant to GTI's business. Provide updates and insight during the development and maintenance of Information Security policies, standards and procedures, aligning with NIST. Lead the identification of security training and awareness initiatives for the organization. Participate in incident response tabletops, business continuity tests, and other compliance activities and exercises. Maintain KPIs and KRIs for Information Security risk & compliance activities. Execute tasks as a member of the Information Security team as assigned by management. Provide mentorship and guidance to Associate Information Security GRC Analysts. Stay up to date on relevant laws and regulations to ensure continuous compliance and audit readiness. Collaborate with the IT and security teams in response to security incidents, ensuring proper documentation and reporting. Qualifications
3+ years of experience with responsibilities relating to security and compliance. Bachelor's degree or higher in Information Security or Information Technology may help you stand out but is not required. Demonstrated work experience can be substituted. Strong written and oral communication skills. Strong conceptual understanding of Information Security theories. Knowledge of network, application, and cloud security controls. Knowledge of regulatory frameworks and compliance standards such as NIST, MITRE, OWASP, HIPAA, PCI-DSS and SOX. Strong analytical and problem-solving skills with well-organized and structured work habits, and the ability to identify and mitigate risks. Security certifications, such as CRISC, CISA are preferred, but not required. We're doing some big things, and we'll find some roadblocks along the way, big and small. A big part of this role is keeping an even keel and finding the route through or around the obstacles. This role requires lots of communication with customers and everyone at GTI. Your colleagues will rely on your ability to translate security requirements into digestible bits of information for them. Customers will expect you to quickly articulate components of the GTI security program to help them assess risk, including as part of the business development process. An insatiable intellectual curiosity and the ability to learn quickly in a complex space. Additional Requirements
Must pass any and all required background checks Must be and remain compliant with all legal or company regulations for working in the industry Must be a minimum of 21 years of age
#LI-HYBRID
The pay range is competitive and based on experience, qualifications, and/or location of the role. Positions may be eligible for a discretionary annual incentive program driven by organization and individual performance.
Green Thumb Pay Range $80,000—$100,000 USD-
Chicago, Illinois, United States Green Thumb Industries (GTI) Full timeThe RoleWe're looking for an Information Security Governance, Risk & Compliance Analyst to join our growing Information Security team. This role will be reporting to the Manager of Information Security Governance, Risk & Compliance. Our security team works to create a strong Information Security function within GTI that enables the business to continue its...
-
Chicago, Illinois, United States Apex Systems Full timeJob#: Job Description:Job Title: Governance, Risk & Compliance (GRC) Security Analyst (Hybrid)Department/Unit: Center for Translational Data Science (CTDS)Reports To: GRC Lead (with moderate direction)Work Location: 5841 S Maryland Avenue, Chicago, IL 60637Work Schedule: 40 hours/week | 8:30 AM – 5:00 PM (30-minute lunch)Hybrid Schedule: Onsite Tuesdays /...
-
Chicago, Illinois, United States Jobs via Dice Full timeRole-Business Analyst/ Information Security Governance AnalystLocation-Chicago, ILProject Overview: We are seeking an analyst with experience in governance of security products, authentication, authorization, and access management with business analysis background. These resources will support the SaaS initiativesContractor's Role: As a member of Governance...
-
Information Security Business Analyst
1 day ago
Chicago, Illinois, United States SPECTRAFORCE Full timeTitle: Information Security Business Analyst (Risk Metrics Dashboards only W2)Location: Chicago, IL HybridDuration: 10 months with possibility of extensionSeeking a Business Analyst to support development of Risk Metrics Dashboards for Information Security programs. This role will focus on translating business needs into actionable requirements for reporting...
-
Compliance Analyst
1 day ago
Chicago, Illinois, United States Dentons Full timeDentons US LLP is currently recruiting for a Compliance Analyst. The Compliance Analyst coordinates governance and compliance activities with stakeholders across the business. Core duties include cross-functional support for legal services and related systems, implementing risk management initiatives, and ensuring client and administrative data is handled...
-
Risk Analyst
1 day ago
Chicago, Illinois, United States Lensa Full timeLensa is a career site that helps job seekers find great jobs in the US. We are not a staffing firm or agency. Lensa does not hire directly for these jobs, but promotes jobs on LinkedIn on behalf of its direct clients, recruitment ad agencies, and marketing partners. Lensa partners with DirectEmployers to promote this job for McDonald's Corporation. Clicking...
-
Manager, Governance, Risk
1 day ago
Chicago, Illinois, United States McDonald's Corporation Full time $127,332 - $159,165Company Description: McDonald's growth strategy, Accelerating the Arches, encompasses all aspects of our business as the leading global omni-channel restaurant brand. As the consumer landscape shifts we are using our competitive advantages to further strengthen our brand. One of our core growth strategies is to Double Down on the 3Ds (Delivery, Digital and...
-
Information Security Analyst
1 day ago
Chicago, Illinois, United States Vedder Price Full timeVedder Price's Chicago office is seeking an Information Security Analyst. The Information Security Analyst is primarily responsible for maintaining technologies to ensure the security of the firm's systems. Thorough understanding on both product based solutions and fundamental security best practices are vital to this role. The Information Security Analyst...
-
Chicago, Illinois, United States Google Full timeMinimum qualifications:Bachelor's degree or equivalent practical experience.3 years of experience troubleshooting technical issues for internal/external partners or customers.Experience in converting concepts into technology for security applications.Preferred qualifications:Experience in partnership with technical and non-technical executive...
-
Chicago, Illinois, United States The Judge Group Full timeAbout the RoleWe are seeking an experienced IT Governance & Controls Program Manager to design, implement, and oversee enterprise‑level governance programs. In this role, you will ensure the effectiveness of IT controls, strengthen operational rigor, and support leadership with data‑driven insights. You will partner cross‑functionally across...
