Policy Analyst

Summary

Security Governance Professional

Must-Haves • 5+ years of Security GRC, Information Security, or Security Governance experience • Security policy, standards, and controls development • NIST 800-53 expertise • Security controls mapping and framework harmonization • Gap analysis and remediation planning • Experience with multiple frameworks: ISO 27001 FedRAMP PCI DSS SOC 2 NIST CSF CIS Controls • Policy, standards, or controls modernization experience • Technical writing and governance documentation • Common Controls Framework (CCF) experience • GRC platform experience (Archer, ServiceNow GRC, OneTrust, LogicGate, Salesforce eGRC, etc.) • Cross-functional stakeholder management (Security, Compliance, Risk, Engineering, Legal)

Preferred Qualifications • CISSP, CGRC, CISA, CISM, or CRISC • SaaS, Cloud, or Enterprise Technology experience • FedRAMP or Public Sector compliance experience • Audit readiness and external assessment support • AI Governance or Responsible AI experience Salesforce platform familiarity

The Security Governance team is responsible for maintaining and modernizing security policies, standards, requirements, and controls framework. This role will support a large-scale governance modernization initiative focused on assessing, rewriting, and enhancing security governance content while ensuring alignment across the Common Controls Framework (CCF) and major industry security frameworks.

Job Description

Security Governance Professional

Must-Haves • 5+ years of Security GRC, Information Security, or Security Governance experience • Security policy, standards, and controls development • NIST 800-53 expertise • Security controls mapping and framework harmonization • Gap analysis and remediation planning • Experience with multiple frameworks: ISO 27001 FedRAMP PCI DSS SOC 2 NIST CSF CIS Controls • Policy, standards, or controls modernization experience • Technical writing and governance documentation • Common Controls Framework (CCF) experience • GRC platform experience (Archer, ServiceNow GRC, OneTrust, LogicGate, Salesforce eGRC, etc.) • Cross-functional stakeholder management (Security, Compliance, Risk, Engineering, Legal)

Preferred Qualifications • CISSP, CGRC, CISA, CISM, or CRISC • SaaS, Cloud, or Enterprise Technology experience • FedRAMP or Public Sector compliance experience • Audit readiness and external assessment support • AI Governance or Responsible AI experience Salesforce platform familiarity

The Security Governance team is responsible for maintaining and modernizing security policies, standards, requirements, and controls framework. This role will support a large-scale governance modernization initiative focused on assessing, rewriting, and enhancing security governance content while ensuring alignment across the Common Controls Framework (CCF) and major industry security frameworks.