Analyst – vGRC (virtual Governance, Risk, and Compliance)

Tevora is seeking a passionate Information Security Consultant who has a solid balance between business acumen and technical expertise. Comfortable across various disciplines of information security, this analyst consultant will be responsible for supporting clients in a variety of roles, such as Governance, Risk, and Compliance (GRC) programs, audit support, policy and procedure development, and advising on InfoSec best practices.

A day in the life could include:

Directly support clients in a variety of roles, such as Governance, Risk, and Compliance (GRC) programs, audit support, policy and procedure development, and advising on Information Security best practices.

Drive successful completion of Sarbanes-Oxley (SOX) audits as part of Client’s GRC team, focused on the ITGCs.

Coordinating and managing Clients regarding internal or external audits, including:

• Control compliance review
• Evidence collection
• Coordination of audit work
• Leading or supporting compliance and risk assessments, including providing guidance to junior resources
• Conducting interviews with clients to analyze their information security controls or risk and identify recommendations
• Execute on multiple client engagements simultaneously
• Communicating with project stakeholders to effectively convey requirements of technical and process improvements.
• Assisting in the development of customized policies, procedures, controls, disaster recovery plans and other documentation for applications, systems, and infrastructure.
• Working with cross functional teams to provide InfoSec compliance support, and maintaining communicating across groups
• Additional duties as assigned

Necessary skills and qualifications:

• Direct experience with ITGCs of SOX, including either externa or internal audit role
• Connect easily with clients and colleagues to communicate effectively across business and technical boundaries- to offer recommendations as an expert with best practices.
• Work independently without detailed guidance, including anticipating next steps and problem solving
• Understanding and predicting customer and project needs
• Ability to balance various project timelines and prioritize differing client needs
• Be proficient in writing executive level reports and technical documentation.
• Have comprehensive knowledge of common IT and security concepts, with a strong desire to expand knowledge base
• At least one Accounting, Risk or IT certification held or in process (i.e., CPA, CISSP, CISA, CISM, CRISC).
• Bachelor's Degree from an accredited 4-year university
• Minimum 3 years of experience in the information security, information technology, business consulting, enterprise risk or compliance field.
• Direct experience with at least one of the following compliance frameworks in addition to SOX: ISO 27001, SOC 2, SOC 1, SOX, or PCI-DSS

Bonus Points:

• Demonstrated experience as an Information Security Compliance Auditor
• At least 2 years experience in client-facing role (e.g., consulting or external auditor)

Additional requirements:

• Eligibility to work in the United States.
• Must be available to work a hybrid schedule at our Irvine, CA office.

We’ve got you covered!

• Comprehensive benefits offering
  • Group Medical, Dental, and Vision, Life insurance, and FSA options
  • Paid time off and holidays
  • 401k with Company match
  • Vibrant work culture