Junior GRC Analyst

Who is Forcepoint?

Forcepoint simplifies security for global businesses and governments. Forcepoint’s all-in-one, truly cloud-native platform makes it easy to adopt Zero Trust and prevent the theft or loss of sensitive data and intellectual property no matter where people are working. 20+ years in business. 2.7k employees. 150 countries. 11k+ customers. 300+ patents. If our mission excites you, you’re in the right place; we want you to bring your own energy to help us create a safer world. All we’re missing is you!

Description

The Junior GRC Analyst role is focused on supporting Forcepoint’s Information Security (IS) - Governance, Risk, and Compliance (GRC) team in several key focus areas. This role requires strong communication skills, a process-oriented mindset, and IT technical skills. From a governance and compliance standpoint, this includes preparation, evidence collection, control monitoring and remediation, and audit support of required cyber-security compliance controls. Additionally, this role will serve as lead in responding to customer compliance requests and security questionnaires on behalf of the GRC team. The Junior GRC Analyst will also support third-party risk assessments as part of new vendor onboarding and recurring vendor assessment requirements. The Junior GRC Analyst will conduct annual reviews of Information Security policies, procedures, and standards to ensure they are maintained and aligned with applicable certification controls.

Responsibilities

· Support the Senior GRC Expert with planning and execution of internal and external IS security audits across an organization and other compliance audit preparedness and certification initiatives.

· Review and development of IS Policies, Procedures, and Plans on an annual basis. This requires the ability to effectively conduct research, strong writing and communication skills, and the ability to engage key stakeholders for review and support of policy controls. This responsibility requires a process-oriented individual with experience in developing process/workflows.

· Apply existing company policies and standards, and applicable industry regulations to assist with planning, maintaining, and operating compliance activities and metrics.

· Collaborate with personnel, both inside and outside the organization, to educate them on audit related cyber-security control requirements, develop, and generate evidence requests, collect artifacts/evidence, conduct reviews, and track and report associated metrics for reporting purposes.

· Daily reviews of the teams’ GRC platform, including security and compliance processes, ensuring they are appropriately documented, control monitoring issues are identified, and action is taken for appropriate remediation.

· Coordinate with business units and technical teams for implementation of remediation measures where deficiencies are identified.

· Serve as the GRC lead with responding to customer requests for GRC compliance and security information as part of onboarding due diligence requests and customer recurring vendor security reviews of Forcepoint.

· Implement new vendor onboarding security reviews and recurring reviews through third-party risk assessments.

· Support GRC’s risk management program with the risk assessment and remediation tracking processes.

Position Requirements

Formal Education & Qualifications

· Education: Bachelor’s degree, Information Technology, Information Security, Business, or equivalent.

· Experience: 1 – 3 years in GRC, risk management, or related IS field.

· Certifications: IS certifications a plus (e.g., CISSP, CISA, CISM, SANS, CRISC, or equivalent). If no comparable certifications, willingness work toward them.

Knowledge & Experience

· Experience mapping and rationalizing IT controls to meet requirements across multiple information security/technology compliance standards (e.g., ISO 27001, SOC 2-Type2, IT General Controls).

· Technical background / education in IT and/or cyber security

· Process mapping - Ability to map and develop process workflows / diagrams.

· Familiarity with compliance tools/platforms is a plus.

· Experience in audit processes for cyber-security certification compliance.

· Excellent written and verbal communication skills.

· Understanding of cloud technologies and SaaS platforms preferred.

Personal Attributes and Skills

· Experience working independently and with cross functional teams.

· Exceptional personal and professional integrity.

· Analytical and problem-solving abilities.

· Ability to multi-task and effectively prioritize and execute tasks in a fast paced and changing environment.

· Proven experience in interfacing and collaborating with people with divers