payscale - GRC Analyst II

Remote - Canada1w ago

Remote Mid NA Cybersecurity Software KYC Analyst Risk Management Data Governance Fiber Policy Management Process Optimization

Requirements

• Bachelor's degree in cybersecurity, information systems, or a related field • 2-4 years of work experience in GRC, information security, or a related field within a commercial SaaS or software company • Working knowledge of information security control frameworks such as SOC 2, ISO 27001, NIST 800-53, or CIS • Demonstrated experience with data classification frameworks and data governance concepts • Experience conducting vendor security assessments and managing third-party risk workflows • Hands-on experience with audit support activities, including evidence collection for SOC 2 or similar frameworks • Solid understanding of information security policies, standards, and procedures • Hands-on experience with GRC tools or platforms (e.g., Drata, ServiceNow GRC, or similar) • Strong written and verbal communication skills with the ability to engage both technical and non-technical stakeholders • Ability to manage multiple workstreams independently, prioritize effectively, and meet deadlines • Payscale has an employee centric remote-first model that provides you the flexibility to do your best work in a space that supports you, while also finding time to collaborate in person for the moments that matter. • In our remote-first model, employees can work from the location that works best for them. We do not have centralized corporate offices. Employees can choose to work from home, in company-paid co-working spaces, or any combination of the two that best suits their unique needs. • If you work from home, we recommend ensuring that you can meet the following technology, equipment and workspace requirements: • High-Speed Internet - A stable broadband or fiber connection (satellite is highly discouraged) with a minimum speed of 100 Mbps in a dedicated workspace that has a reliable Wi-Fi signal. • Device for Multifactor Authentication (MFA/2FA) - smartphone, tablet, etc. • When it matters (usually no more than a few times a year) we take the time to gather for in-person events. • Payscale has employees across the US, Canada, UK, The Philippines and Romania however we are currently unable to hire in the Quebec Province, Northern Ireland, and Hawaii.

Responsibilities

• Maintain Payscale's data classification program, including classification schema, tagging standards, and coordination with data owners to ensure accurate and consistent classification across systems and assets • Maintain the system classification and ownership inventory, partnering with teams to ensure systems are properly classified, attributed, and reviewed on a defined cadence • Support audit coordination activities for SOC 2 and other compliance frameworks. • Conduct vendor security assessments reviews. • Manage the policy management lifecycle, including drafting new policies and standards, tracking review cycles, coordinating approvals, and maintaining version control. • Identify control gaps or process improvement opportunities and partner with business units to implement and sustain effective controls.

Benefits

• All around awesome culture where together we strive to live our 5 values: • Data informed decision making. • Customer first. Always. • Succeed together. • Relentless about results. Obsessed with excellence. • Lead the change. Shape the standard. • An open and inclusive environment where you’ll learn and grow through programs and resources like: • Monthly company All Hands meetings • Regular opportunities for executive leadership exposure through things like AMAs • Access to continued learning & development opportunities • Our commitment to a continuous feedback culture which allows us to drive performance and career growth • A growing network of Employee Resource Groups • Company sponsored volunteer hours • Holiday – Annual accrual for full time and part time employees • Sick Pay – Annual paid time off available • Company Paid and Statutory Holidays – Generous time off provided • 16 weeks of paid parental leave (top off) for birthing and non-birthing parents • Life Insurance - Basic life and AD&D benefit • Long term disability & Critical Illness – Coverage for certain types of illnesses and surgeries • Medical/Rx, Dental, Telehealth – Coverage for prescription, paramedical, medical supplies, emergency, basic and accidental dental, and virtual health care services • Health/Wellness Spending Account – Annual amount provided to you and your family for approved expenses • RRSP offered to employees with a 1:1 match up to 4% • BenefitHub – Discount marketplace, full access to all your benefits and provider portals • Annual remote work stipend to be used on wellness or home office equipment • Our more standard benefits (United States)