AX-14 Sr. Associate, Information Security Governance, Policy & Control

Technologies: GRC, Risk Management, Security Controls

Job Summary

Oceans Code Experts is looking for a Senior Associate in Information Security Governance, Policy & Control to join our team. This role involves working with technologies such as GRC, Risk Management, and Security Controls, requiring at least 5 years of experience. As a Senior Associate, you will be responsible for advanced verbal and written communication, organization, and self-motivated learning.

Job Responsibilities

Demonstrate advanced verbal and written communication skills
Utilize industry standard frameworks for information security risk management, assessment, audit, and controls (e.g., NIST, ISO, COSO, HiTrust, CMMC)
Ensure compliance with regulatory requirements (e.g., PCI, GDPR, HIPPA, Privacy, CCPA)
Utilize GRC tools and technologies to support assessment/audit processes (e.g., RSA Archer, Security Scorecard, Risk Recon)
Identify weaknesses in security controls by gathering information from various sources
Design, develop, implement, and monitor security controls
Have expertise across multiple information security domains

Job Requirements

Bachelor's degree in Computer Science, Engineering, or related field, or equivalent work experience
CISA, CRISC, CISM, or CISSP certifications preferred
5+ years of experience in information security governance, policy, and control
Advanced English proficiency, written and spoken
Experience with security control design, development, implementation, and monitoring
Knowledge of software engineering best practices
Strong collaboration and communication skills
Experience with Git, API integration, and testing

Nice to Have

Demonstrated experience across multiple information security domains
Experience with information security risk management frameworks
Experience with regulatory requirements (PCI, GDPR, HIPPA, etc.)
Experience using GRC tools and technologies

Position Type and Expected Hours of Work