GRC Analyst Job at D and H Distributing Co, Harrisburg, PA

U0xWaC80SGlMUk14NTJzbnhpeGlyQ3FBeFE9PQ==
  • D and H Distributing Co
  • Harrisburg, PA

Job Description

SUMMARY

D&H Distributing is looking to hire a GRC Security Analyst to assist with managing the Governance, Risk, and Compliance (GRC) program. You will be responsible for developing and ensuring compliance with security policy, carrying out security assessments, and assisting with the development and management of a cybersecurity risk management program. Your experience should include exposure to common cybersecurity frameworks including NIST and ISO 27001. Auditing experience is preferred.

ESSENTIAL DUTIES AND RESPONSIBILITIES

  • Assist with the implementation and operation of Governance Risk and Compliance (GRC) tooling to further improve and automate our GRC processes
  • Assist with all ongoing compliance activities related to the implementation, maintenance, monitoring, and continuous improvement of the Information Security Management System (ISMS)
  • Evaluate the effectiveness of information security controls and performance by developing, monitoring, gathering, and analyzing information security and compliance metrics for management
  • Perform third party risk assessments to maintain oversight of third party vendors
  • Manage and coordinate client assurance questionnaires, audits and assessments, and calls
  • Help support various parts of the company to adopt/maintain a common risk and control framework
  • Develop, enhance, operationalize enterprise-level security, risk and privacy policies, processes and controls to mitigate risk and comply with applicable laws and regulations
  • Perform activities to monitor and assess the security, risk and privacy controls on an ongoing basis. Work closely with the operational departments (Legal, Engineering, Sales, Support, Operations, ...) to develop and monitor policies and standards in compliance with applicable privacy policy & regulations
Stay up to date on the latest security and industry trends including their compliance requirements Maintain familiarity with cybersecurity frameworks such as NIST, CIS, and other security technology by attending workshops and reviewing publications Monitor environment for malicious behavior utilizing a variety of security tools and take appropriate remediation Coordinate across organization to ensure mutual success in protecting D&H Monitor changes to the environment to identify if those changes compromise security Investigate security breaches and other cybersecurity incidents with minimal assistance Work with the business units to remediate identified issues with minimal assistance Use the SIEM and analytics tools to monitor logs and understand baseline traffic of the organization Build rules within the SIEM to monitor for new or changed security threats Monitor network traffic for suspicious behavior and, with minimal guidance, determine if traffic is legitimate With minimal assistance, run vulnerability scans across the organization Assist in process improvements to enhance the efficiency of current operational procedures Participate in access control and governance including provisioning/deprovisioning and recertification of accounts Effectively deal with rapid change in a positive manner Participate in all company/location driven communication efforts, including huddles, department meetings, and other related efforts Maintain a positive and professional working relationship with peers, management, support resources, and the community with a constant commitment to teamwork and exemplary customer service to present a professional image of D&H Distributing Perform all other duties as assigned by management in a professional and efficient manner EDUCATION and/or EXPERIENCE Education Bachelor's degree in Cybersecurity or similar area of study required or equivalent years of related work experience 3 - 5 years of experience in cybersecurity Industry certifications (CEH, Security+, SANS, CISSP, OSCP, CCNA Security or similar) preferred Experience
  • Experience with system maintenance, monitoring, and alert resolution preferred
  • Scripting experience in PowerShell, Python or Perl preferred
  • NIST Standards, ISO 27001, and/or PCI DSS
  • Security Policy Development
  • User Access Reviews (UARs)
  • Security and Privacy Impact Assessments (PIAs)
  • Exposure to SOC2/SOX/etc.
  • Auditing experience (preferred)
  • ServiceNow (a plus) D and H Distributing Co

Job Tags

Work experience placement,

Similar Jobs

Innovative Renal Care

Biomedical Technical Lead Job at Innovative Renal Care

Facility Technical Manager The Facility Technical Manager position is responsible for the overall technical maintenance of the dialysis facility. Work involves responsibility for supervising technical employees. The position exercises considerable judgement in applying ...

SynergisticIT

Entry Level Java/C++ Developer Job at SynergisticIT

 ...off Jobseekers who are competing with existing Jobseekers. For entry level Job seekers to get client interviews and jobs they need to...  ...looking for entry-level software programmers, Java Full stack developers, Python/Java developers, Data analysts/ Data Scientists, Machine... 

PeopleReady

Local Class C Flatbed Driver Job at PeopleReady

 ...work/life balance. Responsibilities: Operate a 20" flatbed safely Hauling: Metal and PVC Tubing plugs, switches, wire...  ...job opportunities with just one application - our truck drivers have the opportunity to work for multiple Fortune 1000 companies... 

PC Construction Company

Project Manager - Water Treatment Job at PC Construction Company

PC is seeking a motivated self-starter to manage exciting water and wastewater treatment projects throughout the Northeast regions including Vermont, New Hampshire, and Maine. As a PC Project Manager, you will bring enthusiasm and energy to your work, build long-lasting... 

SPAR Group

Traveling Retail/Remodel Merchandiser (Next Day Pay) Job at SPAR Group

 ...Job Title: Traveling Retail/Remodel Merchandiser (Next Day Pay) Location: Ohio City, OH Job Description: We are seeking a motivated Traveling Retail/Remodel Merchandiser to join our team. This role involves: Traveling to various retail locations for merchandising...