Senior Security Risk & Compliance Analyst

Senior analyst supporting APCO Holdings' security governance, risk and compliance program. The analyst plans and coordinates compliance audits and readiness work, gathers and checks evidence, tracks findings to closure and acts as the link to external auditors, while also running internal audits and control tests with their own plans and reports. The role administers the company's GRC platform and its dashboards, keeps the enterprise risk register, leads risk assessments with business and IT teams, tracks treatment plans, helps maintain security policies and handles customer security questionnaires.

APCO wants five or more years of GRC, audit or security compliance work, practical SOC 2 and New York 23 NYCRR 500 or similar regulatory experience, control testing, and tools such as ServiceNow GRC or Archer. CISA, CRISC or CISSP is preferred. On site; listed offices are Norcross, GA, Ponte Vedra, FL and Westerville, OH.