Information Security Analyst - Policy

GRC analyst required for market leading financial services firm. You will recommend, develop, implement, and monitor enterprise-wide information security policies, procedures, and operational guidelines. You will also research and develop solutions for information security issues and promote information security awareness. Core Responsibilities Conducts security assessments to measure the adequacy of existing information security controls. Identifies potential and actual vulnerabilities and emerging strategic security needs and recommends corrective measures. Supports the development and maintenance of a portfolio of global security policies. Interfaces with clients on all Information Security capabilities Supports the review and approval of RFP responses related to security as needed and carries out vendor security assessments. Supports with regulatory requirements for security, ensuring compliance. Assists in the review, development, testing, and implementation processes for security plans, risk assessments, products and control techniques. Participates in special projects and performs other duties as assigned. Qualifications Minimum four years related work experience. Information Security experience preferred. Undergraduate degree in related field or equivalent combination of training and experience. Preferred security certification such as CISM, CISA, CRISC, CISSP, or other relevant certification required as part of the role. Please note: Although this position is initially offered as an FTC, the intention is that a permanent offer will be made after the initial contract is completed.