Junior IT GRC Analyst

This role is based at our offices in Tampa, FL. As an IT Governance Risk and Compliance Analyst, you will assess and oversee all technology-related compliance issues across the organization including regulatory, information security, data privacy, business continuity, disaster recovery, identity management, user access, and data integrity. This position is also responsible for supporting the VP, Infrastructure, Operations, & Security and CISO in the conducting of NIST CSF, IT, and third-party vendor audits. Develops, maintains, and executes security policies, procedures and standards and manages the risk management program throughout the corporate enterprise.

• Manages Information Security Risk Management Program to ensure company compliance with NIST CSF, CCPA, GDPR and SOX requirements.

• Establish and install key controls on departmental communication equipment and property access. Manage processes for protecting classified, proprietary, and sensitive information.

• Create and maintain documentation as it relates to security policies, procedures, incidents, audits, designs/configurations, processes, and requirements.

• Complete security questionnaires and respond to inquiries from customers.

• Assist in audits and assessments ensuring the completion of appropriate documentation.

• Advises senior management by identifying critical security issues, recommending risk-reduction solutions.

• Evaluate incidents and determine course of action. Report and track all incidents and their resolution.

• Support team for security and compliance requirements.

• Support team for security incidents.

• Support team for vulnerability Management program.

• Third-party vendor assessments and compliance evidence collection

• Review vendor Data Process Agreements; including ad hoc vendor security requirement documents

• Assist in the development of Enterprise IT Policies and Procedures

• Assist in the development and reporting of key performance/risk indicators

• Management and reporting of internal security awareness programs, e.g., phishing campaigns

• Performs other tasks as assigned.

• Conducts job responsibilities in accordance with the standards set out in Masonite's Code of Conduct and Ethics, its policies and procedures, the Corporate Compliance Agreement, applicable federal and state laws, and applicable professional standards.

• To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed above are representative of the knowledge, skill, and/or ability required. Each essential function is required, although reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

• Experience level: Entry Level
• Education: Bachelors (required)