Governance, Risk and Compliance (GRC) Analyst Manage cyber security documentation in consultation with the technical and business stakeholders to comply with the ISO 27001 standard.
We are looking for: About Finity
Finity is the market leading actuarial consulting and strategic analytics firm in Australia and New Zealand. We are proud to have been recently acknowledged as ANZIIF Professional Services Firm of the Year for 2021. At Finity, we combine industry knowledge with technical analysis to offer innovative solutions and practical advice to our large client base. Our clients range from tech startups through to large scale organisations across insurance, finance and government.
Our team of over 200 experts cover a diverse range of skills including; actuarial, analytics, technology, management consulting and support staff. Our consultants assist our clients with a wide range of banking & finance services including; pricing and customer & product insights, automation, risk & capital allocation, financial management, compliance & regulation and data science and analytics. Alongside our consulting work, we also develop a range of software products, offering our clients leading technology to navigate business challenges.
Working with us
We thrive on a dynamic, non-hierarchical structure where everyone respects and engages as professional peers. We are proud to say that some of the industry's leaders are part of our team, and they take as much interest in developing our people as delivering outstanding client solutions.
Key Responsibilities Manage cyber security documentation in consultation with the technical and business stakeholders to comply with the ISO 27001 standard.
Manage responses to cyber security questionnaire requests from clients Complete questionnaires.
Collate response details.
Organise additional information as required.
Manage cyber security questionnaire database used for automating requests from clients Update latest questionnaire responses as they occur.
Review stored responses for relevance and accuracy with subject matter experts.
Manage Finity's Third-party risk management process Assess supplier security posture through information available online or through a supplier risk assessment questionnaire.
Identify risks posed by suppliers and make recommendations to manage those risks in line with Finity's risk appetite.
Essential skills and experience Degree in Computer Science or Information Security.
2-3 years of experience in an information security, risk management or compliance role.
Strong understanding of security risk assessment methodologies and frameworks such as ISO27001.
Exposure to regulatory compliance standards such as APRA CPS234 highly desirable.
Willingness to gain professional certifications such as CISSP, CISM, CRISC.
Strong communication and interpersonal skills, with the ability to effectively communicate complex information security concepts to non-technical stakeholders.
Attention to detail and strong organisational skills.
Excellent analytical and problem-solving skills.
Learn More If this sounds like the right role for you, we'd love to hear from you! Apply Now.
#J-18808-Ljbffr
