Назад
Company hidden
3 дня назад

Senior Governance, Risk and Compliance Analyst (Cybersecurity)

81 900 - 105 500GBP
Формат работы
remote (только USA)/hybrid
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
UK/US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Senior Governance, Risk and Compliance Analyst (Cybersecurity): Mapping certification and regulatory requirements to security controls, managing audits, and automating compliance evidence collection across on-premises and cloud product environments with an accent on NIST, FedRAMP, CMMC, GDPR, and PCI-DSS. Focus on cybersecurity risk assessments, gap remediation, privacy compliance, business continuity, and designing operational controls for ongoing certification readiness.

Location: Remote / hybrid work environment; the role is listed in London, UK, but candidates must be based in the US to support Federal customers and must have the right to work in the applied location.

Base salary: £81,900.00–£105,500.00 GBP, plus bonus or commission and benefits.

Company

hirify.global provides trusted connectivity and high-assurance cybersecurity for mission-critical environments, protecting sensitive data and securing access and collaboration across networks and domains.

What you will do

  • Map certification and regulatory requirements to security controls and actionable practices across company functions.
  • Design, review, and maintain security controls, information security policies, standards, and procedures.
  • Coordinate internal and external audits with security auditors for NIST 800-171, NIST 800-53A, CMMC, FedRAMP, GDPR, PCI-DSS, and other programs.
  • Work with cross-functional teams to operationalize controls, capture evidence continuously, and report audit and compliance status.
  • Lead cybersecurity risk assessments, business-process risk analysis, gap remediation, and continuity and disaster recovery compliance activities.
  • Support GDPR privacy compliance, including Privacy Impact Analysis and analysis of information flows.

Requirements

  • 7+ years of experience in information security, including at least 5 years in on-premises and cloud product vendor environments, ideally Azure.
  • Familiarity with technical security controls and frameworks including NIST 800-171/CMMC and NIST 800-53A/FedRAMP.
  • Understanding of NIST 800-30 and NIST 800-37, cybersecurity risk management, and remediation planning.
  • Experience successfully completing security audits for certification programs and managing audit evidence.
  • Ability to articulate cybersecurity risk in business terms and present to company management.
  • Strong communication skills across executives, business leaders, functional teams, and technical staff.
  • Bachelor’s degree preferred, or an equivalent combination of education, training, and experience.
  • Team-oriented approach with the ability to drive execution and change through influence and partnership.
  • Must be based in the US to support Federal customers and have the right to work in the applied location.

Nice to have

  • Industry-recognized certifications such as CISSP, CISM, or GIAC.

Culture & Benefits

  • Remote and hybrid work environment.
  • Competitive annual leave, pension match, private medical insurance, dental coverage, health cash plan, and income protection.
  • Additional bonus or commission may be offered alongside base salary.
  • Role has no direct reports.

Будьте осторожны

Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →