Information Security Governance Risk Compliance Analyst - #2696.04

Job Description

Job Description

What We Offer:

Our excellent salary and benefits package includes medical, dental, vision, life insurance, short and long-term disability coverage, education reimbursement, 401(k), performance bonuses, and an employee stock program. Employee Resource Groups and Programs offered include the Young Professionals Group, Women at Wade Trim, Diversity, Equity and Inclusion, Professional Development, Leadership Development, Rotation Program, Mentor Program, Sustainability Program, and Wellness Program.

Position Description:

We are looking for an Information Security Governance Risk Compliance Analyst to join our IT Team to improve infrastructure in our Detroit office. The candidate must have a bachelor's degree in Computer Science with a focus on Cybersecurity or a closely related field and 3-5 years of experience. Operation knowledge of Azure, O365, CrowdStrike, KnowBe4, Mimecast, ZenGRC+, and Archer. Candidate should also have strong leadership and project management skills, with the ability to manage multiple priorities and deliver results within deadlines. The candidate must also be self-motivated, work well with others, and have excellent writing, organizational, and communication skills. A flexible hybrid-remote work schedule is available after 30 days of employment.

Typical responsibilities include:

• Responsible for monitoring and tracking regulatory changes, ensuring that the organization remains compliant with all relevant laws, standards and industry regulations.
• Conduct comprehensive risk assessments to identify potential threats and vulnerabilities within the organization’s operations.
• Assist in the development, implementation, and revision of corporate policies and procedures to align with the best practices and compliance requirements.
• Collaborate with internal and external audit teams, providing documentation and evidence as needed to demonstrate compliance and adherence to governance standards.
• Assist in the development and maintenance of incident response plans to effectively address and mitigate security incidents or compliance violations.
• Prepare and distribute regular reports to IT & IT Security leadership as well as business leadership summarizing risk assessments, compliance status, and recommendations for improvement.
• Assist IT Security operations in the development and delivery of training programs to educate users on governance, risk, and compliance matters, fostering a culture of awareness and accountability.
• Identify opportunities for enhancing governance processes and recommend improvements to reduce risk exposure and enhance operational efficiency.
• Maintain a safe working environment.

Education:

• Bachelor's degree in Computer Science with a focus on Cybersecurity or a closely related field is required.
• Certifications in ISC2 CGRC (formerly CAP) or ISACA CISA are required.
• Certifications in ISC2 CISSP, and ISACA CRISC are not required, but preferred.

Skills/Expereince:

• Minimum of 3 years of related experience
• Strong leadership and project management skills, with the ability to manage multiple priorities and deliver results within deadlines is required
• Strong operating knowledge of platforms such as Azure, O365, CrowdStrike, KnowBe4, Mimecast, ZenGRC+, and Archer
• Excellent communication and interpersonal skills, with the ability to communicate complex security concepts to both technical and non-technical audiences is required
• Excellent organizational skills in order to accommodate multiple tasks simultaneously
• Excellent understanding of technology infrastructure and systems, including networks, databases, and cloud computing is required
• Maintain a professional demeanor at all times and be conscious of confidentiality issues when dealing with individuals at all levels
• Must be easily understood by other employees, clients, and vendors
• Strong analytical and problem-solving skills, with the ability to assess risks and develop practical solutions
• Professional certifications in information security, such as ISC2 CISSP, ISACA CRISC, ISACA CISA, and ISC2 CGRC (formerly CAP) are highly desirable

About Wade Trim:

Wade Trim is committed to maximizing the value of infrastructure investments. We’ve been solving complex engineering challenges for nearly a century. We customize our work approach to fit each project using a collaborative, friendly style to deliver solutions our clients can stand behind.

Our supportive culture recognizes and strives to fulfill collective client, company, and individual needs. Mentoring and building skills of Wade Trim staff is a priority. Frequent interaction among staff is encouraged, company leadership is easily accessible, and opportunities are provided for staff to help shape the firm’s future through strategic planning. Work/life balance is supported through a flexible, hybrid work schedule that brings team members together in the office at least three days a week and connects them virtually when working from home.

To solve our clients’ toughest challenges, we’ve devoted ourselves to delivering innovative solutions. Our Office of Applied Technology (OAT) is dedicated to seeking new technologies or ways to apply existing technologies to enhance value to our clients and positively impact communities. All staff are encouraged to share ideas and suggestions for innovative technologies or processes to adopt. This open-minded approach enables us to advance technology, foster innovation, and stay ahead of our clients’ needs.

Wade Trim’s success is shared by the employees that make it happen. Since our beginning, our firm has been 100% employee owned. This cultivates an ownership mindset that benefits our work approach, collaborative culture, and ability to deliver client solutions. We believe employee ownership drives the sustainability and growth of our firm and provides all our employees with opportunities for financial success.

If you are looking for a challenging and rewarding career in a friendly environment, please submit your resume by visiting the Careers section of our website at

Wade Trim does not accept unsolicited resumes, candidate profiles, or CVs from third-party recruiters or employment agencies. Any submission made without a valid, signed agreement and an approved engagement request from Wade Trim’s People Services Team will be considered the property of Wade Trim. Wade Trim reserves the right to pursue and hire any candidate submitted through unsolicited means without any financial obligation to the recruiter or agency. A valid agreement can only be signed by the Director of People Services. Resumes or candidate profiles submitted at the request of a Wade Trim employee who is not authorized by the People Services team do not constitute a valid engagement. Recruiters and agencies must have a current, written agreement authorized by the Director of People Services to be considered an approved vendor.

Wade Trim is an Affirmative Action/Equal Opportunity Employer.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.