Senior Cyber Risk Analyst- Governance, Risk & Compliance (GRC)

for management of cyber risk across the enterprise. The role offers the opportunity to be engaged in all facets of cyber risk including security, privacy, risk management, as well as security and compliance program development. As a member of the department, the individual will be committed to overall data protection, risk management and its role in the company's continued success. This position serves as an internal risk consultant and will be the subject matter expert responsible for designing, implementing, and supporting a security control framework for a multi-tenant software-as-a-service product. Primary responsibilities include assisting with audits of SSAE18 SOC 1, SOC 2, and ISO compliance exams and monitoring control activities in certified environments. This position demands an organized, detail-oriented team player with the ability to prioritize daily work and support multiple initiatives simultaneously; strong communication and customer focus is required.

RESPONSIBILITIES
• Contribute risk and compliance expertise and support to assist in the achievement of cloud audit/compliance programs.
• Support customer hosted cloud environments to ensure control activities are designed and implemented appropriately to protect the security, confidentiality, privacy, integrity, and availability of data in compliance with organization policies and standards.
• Perform continuous monitoring activities to confirm the control environment is operating effectively and escalate identified deviations.
• Participate in risk assessments in SSAE18 SOC 1, SOC 2, ISO environments and collect evidence in support of audits.
• Assist external auditors conducting annual compliance audits by reviewing all evidence to confirm it satisfies the items included in the document request list.
• Utilize industry experience and knowledge to provide expertise and support to ensure company's security framework remains in compliance with applicable regulations including evolving data privacy regulations.
• Support the development, implementation, and updating of security policies and procedures.
• Facilitate the exception and exemption processes for vulnerability management and hardening management programs.
• Perform additional duties and projects as assigned by management.

Qualifications
B Tech /MCA, Any Graduate

EEO Statement

Equal Opportunity Employer

Ultimate Kronos Group is proud to be an equal opportunity employer and is committed to maintaining a diverse and inclusive work environment. All qualified applicants will receive considerations for employment without regard to race, color, religion, sex, age, disability, marital status, familial status, sexual orientation, pregnancy, genetic information, gender identity, gender expression, national origin, ancestry, citizenship status, veteran status, and any other legally protected status under federal, state, or local anti-discrimination laws.

View The EEO Know Your Rights poster and its supplement.

View the Pay Transparency Nondiscrimination Provision

UKG participates in E-Verify. View the E-Verify posters here .

Disability Accommodation

For individuals with disabilities that need additional assistance at any point in the application and interview process, please email [email protected].