Information Security GRC Analyst

Strength in Trust 

Imagine being part of an organization dedicated to unlocking the potential of every company to thrive while championing what's good for both people and the planet. At OneTrust, we leverage cutting-edge technology and a pragmatic approach to privacy, GRC (governance, risk management, and compliance), ethics, and ESG (environmental, social, and governance) to create a straightforward platform that amplifies the global push for Trust Intelligence.

Trust serves as the bedrock of every successful business, and OneTrust delivers the technology that empowers you to transform the promise of trust into reality.  We recognize and reward top talent with competitive total packages, including equity for all, performance bonuses, and retirement savings with matching contributions.

The Challenge

We are looking for a dynamic Information Security GRC Analyst to support IT and InfoSec by performing various governance, risk, and compliance activities as part of the OneTrust InfoSec GRC team.

Your Mission

To collaborate with our sales team to address customer audits, assist with RFPs/RFQs and internal audits, manage the issues and risk acceptance process, and execute risk management processes to support ongoing compliance efforts. 

• Supports ongoing compliance and audit processes 
• Works with IT and business owners to collect evidence of effective controls 
• Updates or defines policy, standard, and process documentation to align with compliance requirements 
• Responds to customer inquiries and RFP/RFQs to provide appropriate answers 
• Supports customer audits as needed 

You Are

This a team player who can work well within the GRC team. 

• Collaborate with IT, InfoSec, and within the GRC team to mature the compliance process 
• Follow our ongoing risk and control self-assessment, audit management, security risk assessment, and third-party assessment processes 
• Provide front line support to customer meetings and audit requests to ensure that OneTrust’s customers understand the security program and controls and how it meets the requirements of the customer 
• Facilitate and manage multiple audits simultaneously 
• Become a trusted advisor to IT, InfoSec, and the business 
• A Relationship builder: Ability to listen, build rapport, and credibility as a strategic partner vertically and horizontally 
• An Innovator: Possess the ability to seek alternatives and recommend best solutions that gain all parties support and lead to win-win results 
• Value Driven: You are detail oriented with an eye for quality 
• Ability to work with minimal oversight  
• Ability to execute given high level direction 
• Asks good questions and always learning 

Your Experience Includes   

• Understanding of applicable laws and regulations, including but not limited to, GDPR, CCPA, PCI-DSS, SOC 2, ISO, and FedRAMP 
• Understanding of technology domains including governance, risk management, security, privacy, and information technology and business continuity 
• Planning, supporting, and or executing audits (customer-driven, internal, external) 
• Bachelor’s degree; or 3 years of equivalent work experience or a Master’s degree; or a PhD without experience; or equivalent work experience. 

 

Extra Awesome

Consulting and/or international experience · Certifications: Security+, CISSP, CISM, CCSP, CISA, Azure 

Benefits

As an employee at OneTrust, you will be a part of the OneTeam. That means equity, bonuses, unlimited PTO, and 100% paid medical benefits (and that’s just the beginning!).  

Our employee rewards philosophy spans mental, physical, and emotional well-being because we want our people to succeed both in and out of the office. Some benefits differ depending on region, but here’s what you can expect from our OneTeam Total Rewards Program: 

• Competitive Compensation: We offer top pay for top talent with competitive total packages including equity for all, performance bonuses, and retirement savings with match. We’re also committed to fair and equitable pay practices. 
• Workstyle Flexibility: At home or in the office, we trust you to get the job done. Our people have the option to work in the office, fully remote, or a hybrid based on their role. Go green with commuter program discounts and in-office perks.  
• Career Development: You’re not just joining any company; you’re joining the company that built the category-defining software platform for trust. You can become an expert and earn industry certifications with training and exams paid for by us and access to our learning & development program and guest speaker series.  
• Employee Recognition:<