Risk and Compliance Analyst

at  Relativity

At Relativity, we have a world-class compliance team focused on maintaining an industry-leading approach to security, privacy, and enterprise risk management. We are building scalable processes and programs to ensure they are customer-centric and fit a rapidly growing company worldwide. We are passionate about security, cloud computing, and technology.
The Risk and Compliance Analyst coordinates risk and compliance initiatives within the company and supports the development and maintenance of its information security management standards.

MINIMUM QUALIFICATIONS

• Strong knowledge of key principles of information technology/security general controls, including change management, access to programs and data, segregation of duties, asset management, computer operations, encryption practices and secure systems development.
• Advanced knowledge of Microsoft Office software applications.
• Strong communication and interpersonal skills.

PREFERRED QUALIFICATIONS

• Current security certifications such as CISA (Certified Information Systems Auditor), Security+, Network+, Project+ and/or other relevant security certifications.
• Competency to automate and script basic business data collection processes.
• Experience with implementing tools for managing governance, risk and compliance activities (i.e., Jira, LogicGate, Service Now GRC, Archer, etc.)
• Experience working with outside auditors.
• Ability to work efficiently under pressure, drive projects to completion and meet deadlines.
• Strong problem-solving and critical thinking skills.

• Coordinate the effective and efficient tracking of the company’s information security management program and compliance-related activities, including reviews, evidence tracking, performance monitoring, risk assessments.
• Create, coordinate and/or retain information related to the InfoSec Committee, including oversight and committee materials, meeting minutes, procedures, policies, risk registry, testing results, security roles or permissions and other documentation as required.
• Build and recommend enhancements to the information security management program and workflow tools.
• Perform control testing and process audit, operational process reviews and review system implementations and applications.
• Coordinate deployment and measurement of information security control standards across the company as appropriate.
• Maintain accurate log files and audit artifacts in systems of record.
• Assist with research and interpretation of standards and compliance regulations, as well as the development of policies, procedures and workflows.
• Balance risk and creativity while responding quickly to business and technical opportunities.
• Demonstrate consistent commitment to core company values.