Senior Analyst, Information Security Risk and Compliance (Cybersecurity)

Location: Remote in the United States, California

Company

hirify.global develops electric vehicle charging hardware, software, and mobile solutions for customers across North America and Europe.

What you will do

• Enhance IT general controls and mature the governance, risk, and compliance program through automation and common control frameworks.
• Maintain compliance with SOX, FedRAMP, PCI, ISO 27001, SOC 2, NIST 800-53, and related standards.
• Improve access management, change management, operational procedures, policies, and processes for in-scope IT systems.
• Collaborate with business stakeholders, control owners, internal auditors, and external auditors on current and planned compliance activities.
• Validate ITGC control design, documentation, execution, monitoring, and audit readiness.
• Build monthly and quarterly reporting on GRC activities and security project status for senior management.

Requirements

• Bachelor’s degree in business, information systems, engineering, science, or a related field, with at least 5 years of relevant experience.
• 8+ years of experience in internal controls and risk management, including ITGC SOX, SOC 1/2/3, or IT internal audit programs.
• Knowledge of Sarbanes-Oxley, NIST 800-53, FedRAMP, ISO 27001, NIST CSF, and relationships between security frameworks.
• Experience working with and managing internal and external auditors.
• Familiarity with SaaS applications such as NetSuite, Workday, Salesforce, and GitHub, plus AWS and Google Cloud from an IT controls perspective.
• Strong communication, stakeholder management, organizational, risk assessment, and compliance reporting skills.

Culture & Benefits

• Remote work arrangement.
• Inclusive and diverse workplace with reasonable accommodations throughout the employment process.
• Work on electric vehicle charging hardware, software, and mobile solutions.