Jobless Developer
Tevora logo

Posted 9 days ago

Analyst – vGRC (virtual Governance, Risk, and Compliance)Tevora · Irvine

Analyst – vGRC (virtual Governance, Risk, and Compliance)

IrvineHybrid

AI Summary

Supports clients as a vGRC analyst consultant on governance, risk and compliance programs, including SOX ITGC audit support, policy development and information security best practices advisory.

About this role

Analyst – vGRC (virtual Governance, Risk, and Compliance)

at Tevora
Irvine, CA, or Fairfax, VA
If you haven't heard of Tevora, it's because we've done our job!
Tevora is a tight-knit community of professionals with a shared passion for our craft. Every day, we combine in-depth knowledge of cybersecurity, technology, and compliance to help create more secure digital environments. To Tevorans, every problem is a puzzle in need of solving. We strongly believe that if we put smart, driven people in a room together, they will accomplish great things. We maintain a supportive culture that celebrates continuous learning, diverse perspectives, and sharing the wins. That's why we have our eyes on you
What's the role?

Tevora is seeking a passionate Information Security Consultant who has a solid balance between business acumen and technical expertise. Comfortable across various disciplines of information security, this analyst consultant will be responsible for supporting clients in a variety of roles, such as Governance, Risk, and Compliance (GRC) programs, audit support, policy and procedure development, and advising on InfoSec best practices.

A day in the life could include:

  • Directly support clients in a variety of roles, such as Governance, Risk, and Compliance (GRC) programs, audit support, policy and procedure development, and advising on Information Security best practices.
  • Drive successful completion of Sarbanes-Oxley (SOX) audits as part of Client’s GRC team, focused on the ITGCs.
  • Coordinating and managing Clients regarding internal or external audits, including:
    • Control compliance review
    • Evidence collection
    • Coordination of audit work
    • Leading or supporting compliance and risk assessments, including providing guidance to junior resources
    • Conducting interviews with clients to analyze their information security controls or risk and identify recommendations
    • Execute on multiple client engagements simultaneously
    • Communicating with project stakeholders to effectively convey requirements of technical and process improvements.
    • Assisting in the development of customized policies, procedures, controls, disaster recovery plans and other documentation for applications, systems, and infrastructure.
    • Working with cross functional teams to provide InfoSec compliance support, and maintaining communicating across groups
    • Additional duties as assigned
  • Necessary skills and qualifications:

    • Direct experience with ITGCs of SOX, including either externa or internal audit role
    • Connect easily with clients and colleagues to communicate effectively across business and technical boundaries- to offer recommendations as an expert with best practices.
    • Work independently without detailed guidance, including anticipating next steps and problem solving
    • Understanding and predicting customer and project needs
    • Ability to balance various project timelines and prioritize differing client needs
    • Be proficient in writing executive level reports and technical documentation.
    • Have comprehensive knowledge of common IT and security concepts, with a strong desire to expand knowledge base
    • At least one Accounting, Risk or IT certification held or in process (i.e., CPA, CISSP, CISA, CISM, CRISC).
    • Bachelor's Degree from an accredited 4-year university
    • Minimum 3 years of experience in the information security, information technology, business consulting, enterprise risk or compliance field.
    • Direct experience with at least one of the following compliance frameworks in addition to SOX: ISO 27001, SOC 2, SOC 1, SOX, or PCI-DSS

    Bonus Points:

    • Demonstrated experience as an Information Security Compliance Auditor
    • At least 2 years experience in client-facing role (e.g., consulting or external auditor)

    Additional requirements:

    • Eligibility to work in the United States.
      • Must be available to work a hybrid schedule at our Irvine, CA office.

    We’ve got you covered!

    • Comprehensive benefits offering
      • Group Medical, Dental, and Vision, Life insurance, and FSA options
      • Paid time off and holidays
      • 401k with Company match
      • Vibrant work culture

    Skills

    CISACISMCISSPCompliance Risk AssessmentControl Compliance ReviewCPACRISCDisaster Recovery PlanningEvidence CollectionInformation Security PoliciesISO 27001PCI-DSSSOC 1SOC 2SOX AuditSOX ITGC

    Explore related jobs

    Browse these categories

    Market data for this role

    All reports →