SeniorAnalyst,InformationSecurity

## Accountabilities Support the lifecycle management of information security policies, standards, procedures, and governance documentation, including reviews, updates, approvals, and version control. Map and interpret regulatory and framework requirements (PCI-DSS, NIST CSF, SOC 2, SOX, FTC Safeguards) into internal security controls and governance documentation. Review and enhance governance materials to ensure clarity, consistency, enforceability, and alignment with regulatory expectations and internal standards. Coordinate with stakeholders across security, compliance, legal, and business teams to maintain accurate and audit-ready documentation repositories. Support security awareness initiatives, including training content development, phishing simulations, and engagement tracking across user groups. Develop dashboards, reports, and metrics covering policy compliance, awareness participation, phishing trends, and governance effectiveness. Contribute to audit readiness, evidence collection, and continuous improvement of governance and awareness processes. Requirements: You are an analytical and detail-oriented security professional with experience in governance, compliance, or security awareness programs. You are comfortable translating regulatory and technical concepts into structured, actionable documentation and insights. 3–5 years of experience in information security, GRC, compliance, technical writing, or security awareness roles. Strong understanding of security frameworks such as PCI-DSS, NIST CSF, SOC 2, SOX, and FTC requirements. Experience in policy development, governance documentation, and mapping regulatory requirements to controls. Excellent technical writing, editing, and communication skills in English. Strong analytical thinking with the ability to identify gaps, inconsistencies, and improvement opportunities in governance structures. Experience supporting security awareness programs, including phishing simulations and training initiatives. Abil