Information Security (InfoSec) Risk Management Analyst (GRC) St. Louis

Knowledge (includes but is not limited to):  

• General knowledge of risk management methodologies. 
• General knowledge of policy lifecycle processes.
• General knowledge in information security best practices and frameworks, including (but not limited to) NIST Special Publications and Cyber Security Framework, CIS Controls, ISO/IEC 27000 series, and OWASP Top 10. 
• General knowledge of audit and compliance methodologies. 
• General knowledge of laws and regulations related to information security and relevant to the organization, such as the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA).

 

 

Skills (includes but is not limited to):

• Demonstrate professional skepticism to ensure evidence is sufficient when assessing the relevant information security controls.
• Communicate and present concisely and effectively based on the appropriate level of management and audience.
• Manage competing deadlines and prioritize responsibilities to effectively meet business needs.
• Work both independently and as part of a team at all levels and across departments.
• Demonstrate an understanding of business processes, internal control risk management, IT controls, and how they interact together.
• Demonstrate leadership and problem-solving skills.
• Demonstrate proficiency in process formulation and improvement.
• Demonstrate knowledge of legal requirements for the privacy of personal information from employees and customers.
• Strong attention to detail in documenting policies, standards, and processes.

 

Education and Experience Requirements:

• 2 – 4 years of experience in the InfoSec field.
• Bachelors degree preferred
• A Cyber Security, Information Assurance, InfoSec, or Information Technology degree is preferred. 
• Security certifications are preferred. 
• General knowledge of a wide breadth of information security areas. Deep technical knowledge is not required.
• Excellent verbal and written communication skills. Able to communicate persuasively and influence others. Able to have difficult conversations with employees who do not follow policy.  Able to explain technical information to customers, vendors, senior management, and staff.  Able to apply knowledge and deductive reasoning.

 

Location: St. Louis, MO

Certain states and localities require employers to post a reasonable estimate of salary range. A reasonable estimate of the current base pay range for this position is $77,200.00 to $96,500.00 annually. Actual salary will be based on a variety of factors, including shift, location, experience, skill set, performance, licensure and certification, and business needs. The range for this position in other geographic locations may differ. Certain positions may also be eligible for variable incentive compensation, such as bonuses or commissions, that is not included in the base pay.

The well-being of WWT employees is essential. So, when it comes to our benefits package, WWT has one of the best. We offer the following benefits to all full-time employees:

• Health and Wellbeing: Health, Dental, and Vision Care, Onsite Health Centers, Employee Assistance Program, Wellness program
• Financial Benefits: Competitive pay, Profit Sharing, 401k Plan with Company Matching, Life and Disability Insurance, Tuition Reimbursement
• Paid Time Off: PTO and Sick Leave (starting at 20 days per year) & Holidays (10 per year), Parental Leave, Military Leave, Bereavement
• Additional Perks: Nursing Mothers Benefits, Voluntary Legal, Pet Insurance, Employee Discount Program

We strive to create an environment where all employees are empowered to succeed based on their skills, performance, and dedication. Our goal is to cultivate a culture of belonging that encourages innovation, collaboration, and respect for all team members, ensuring that WWT remains a great place to work for All!

If you have any questions or concerns about this posting, please email taposting@wwt