Grc analyst jobs in New York, NYCreate job alerts

Job Description Vistrada is looking to hire a strong Cybersecurity Analyst to join our Cybersecurity practice. A Cybersecurity Analyst is part of a team that consults with clients about cybersecurity related topics and strategies. This role helps clients identify cybersecurity related improvements, conduct cybersecurity risk assessments, conduct cybersecurity scans and testing, document cybersecurity related policies and procedures, and respond to cybersecurity related issues. Responsibilities Include: • Conduct regulatory compliance audits and assessments utilizing frameworks like CMMC, NIST, CSF, ISO, PCI, HIPAA, etc., • Create and update cybersecurity related policies and procedures., • Participate in the creation of cybersecurity awareness training programs, materials and conduct training sessions., • Perform scripted penetration testing and vulnerability scanning utilizing tools like Clone Systems., • Review and deliver penetration testing and vulnerability scanning reports to clients., • Participate in the on-boarding of clients into GRC tools like Apptega., • Provide training and support to clients for our GRC tools., • Participate in activities related to phishing\social engineering testing, physical security assessments, and tabletop exercises., • Participate in activities related to our advisory services offerings including planning, budgeting, presentation building, crisis management, etc., • Participate in activities related to cybersecurity incident response and remediation., • Keep abreast of emerging technologies related to cybersecurity and communicate findings to the team., • Knowledge of NIST 800-53, NIST 800-171, CSF, CMMC, DFARS, IS027001, PCI, HIPAA and other regulations, • Possess a bachelor’s degree in Cybersecurity, • Policy Development, • 1-5 years of experience, • Vulnerability Scanning / Penetration Testing, • Ability to handle multiple assessments at one time, • Possess/pursuing certifications such as CISA or CISSP, or something similar, • Strong analytical skills and ability to effectively prioritize and coordinate multiple deliverables simultaneously, • Strong ability to work effectively in a team and to communicate verbally and in writing with both external and internal customers Benefits: Medical, Dental, 401K (with employer match), Disability, Paid Time Off, and Bonus Program. Salary Range: $60K-$80K Company Background: Vistrada is a Business, Technology, and Management services firm dedicated to helping clients plan and implement initiatives across Business and Technology Transformation, Integrated Risk Management, Cybersecurity, and Managed Services. Vistrada provides deep expertise and flexible team structures ensuring agility and responsiveness to support our client’s evolving needs. We leverage the right team during a client’s journey to optimize their investment and commitment. Founded in 2007, Vistrada LLC is a profitable privately-held minority-owned organization. With more than 500+ people successfully serving clients today, our teams operate with a breadth of expertise bringing Big 4 consulting, agency, and Fortune 500 company experiences to clients. Our clients include the most prestigious institutions and many emerging companies with relationships spanning 10+ years. Vistrada has extensive public and private sector experience. Powered by JazzHR J26xsW7PZe

Job Description Who We Are: Click Therapeutics, Inc., develops, validates, and commercializes software as prescription medical treatments for people with unmet medical needs. As a leading innovator of Digital Therapeutics™, Click delivers accessible, clinically proven, FDA-regulated prescription treatments to the smartphone in your hand. Click's treatments are defined by a commitment to applying technical and scientific rigor and patient-centric design to the development process. This results in uniquely engaging experiences that achieve compelling clinical outcomes for patients seeking new treatment options. Click Therapeutics continuously expands and refines its platform with novel cognitive, behavioral and neuromodulatory mechanisms of action and advanced data-driven tools such as artificial intelligence and machine learning. The digital therapeutics under development on Click's platform address diverse areas of therapeutic need, including indications in psychiatry, neurology, oncology, immunology, and cardiometabolic diseases. Consistently named a best place to work, Click fosters an inclusive, diverse workforce of innovators, clinicians, scientists, researchers, designers, technologists, engineers and more, united in a common mission to provide patients everywhere access to safe and effective prescription digital therapeutics. For more information, visit and connect with us on LinkedIn. About the Role: We're looking for a Cybersecurity Project Analyst to join our team at Click Therapeutics, Inc. In this role, you'll be a key player in our information security program, working alongside the Cyber Team, engineers, and senior security experts. Your main responsibilities will include helping to design, test, implement, and monitor the security measures that protect our company. This position is based out of Click's headquarters located in Tribeca, NYC, at the center of one of the fastest-growing digital health communities. We have a hybrid working model that consists of at least 3 days in office each week. Responsibilities: • Maintain awareness of emerging cybersecurity threats, regulatory requirements, and industry best practices across Information Security, Application Development, GRC to help drive organizational change., • Identify and assess vulnerabilities in critical assets, customer network, and systems; coordinate and manage remediation activities to closure., • Maintain and mature the Third-Party Risk Management lifecycle, including onboarding, due diligence, re-assessments, and risk mitigation., • Monitor and track risk, risk exceptions and compensating controls; ensure risk acceptance processes are documented and approved in accordance with governance policies., • Develop, implement, and maintain risk and compliance programs aligned with NIST, ISO 27001, SOC 2, and CyberEssentials frameworks., • Create, update, and maintain standard operating procedures (SOPs) and information security policies (ISPs) to ensure alignment with organizational posture and compliance requirements., • Lead internal and external audits and support compliance efforts, including SOC 2, ISO-27001, and other regulatory frameworks., • Assist with incident response activities, including triaging alerts, and investigating security events to system and network security alerts., • Lead monthly phishing simulation campaigns and analyze results to strengthen the organization's security awareness., • Manage and enhance the Security Awareness Training program, ensuring engagement and ongoing relevance to emerging threats and best practices., • Participate in the change management process, ensuring that security requirements and impact assessments are properly addressed., • Collaborate with the Cloud and Application engineering teams to provide security-focused guidance during the design and implementation phases., • Work as part of a cross-functional team of engineers and analysts, contributing in a respectful, inclusive, and collaborative environment., • 1+ years of hands-on experience in cybersecurity, information security, or a related field., • Strong eagerness to learn, take initiative, and engage with new and evolving tasks., • Effective verbal, written, and interpersonal communication skills., • Foundational knowledge and understanding of IT risk assessments of potential and current information security risk., • Experience working with cloud-based environments and microservices architecture, including configuration, operation, and maintenance (e.g., AWS)., • Familiarity with compliance and risk management requirements in regulated industries such as healthcare, or related industries., • Working knowledge of common security frameworks (e.g., NIST, SOC 2, ISO27001), • Familiarity with developing within an agile scrum planning methodology The base salary range for this position is between: $85,000 - $110,000. The final base salary will be dependent upon skills, experience and location. In addition to the base salary, Click Therapeutics offers an annual performance-based cash bonus and a generous equity package. Benefits: The role includes great benefits and is an excellent wealth-building opportunity at a fast-growing pre-IPO company in a nascent and extremely exciting space. Competitive Salary with Annual Review | Cash Bonus | Stock Options | 5% 401(k) matching | Medical | Dental | Vision | Life Insurance | Voluntary Benefits | Unlimited PTO | Uber One | Nectar Rewards | One Medical | Fertility Support | Fitness Reimbursement | Bike Membership | Professional Development Stipend | DoorDash and Catered Lunches | Parent Benefits | LinkedIn Learning | Gemini Enterprise Stack | Industrious Workspaces | Commuter Subsidies | Flexible Work Arrangement | Choice of Mac or Windows | Sponsored Company Events | Office Snacks and Beverages | Much More… Equal Employment Opportunity: Click Therapeutics is committed to equal opportunity in the terms and conditions of employment for all employees and job applicants without regard to race, color, religion, sex, sexual orientation, age, gender identity or gender expression, national origin, disability or veteran status. Click Therapeutics also complies with all applicable national, state and local laws governing nondiscrimination in employment as well as employment eligibility verification requirements of the Immigration and Nationality Act. All applicants must have authorization to work for Click Therapeutics in the U.S. In certain circumstances it may be advantageous to Click Therapeutics to support the application(s) for temporary visa classification and/or sponsor applications for permanent residence so that a foreign national colleague can accept or remain in a work assignment in the U. S. For certain classes of temporary visas, the resulting work authorization may be specific to Click Therapeutics and the specific job and/or work site. Click Therapeutics may at its business discretion decide to or refrain from obtaining, maintaining and/or extending the temporary visa status and/or sponsoring a colleague for permanent residency and /or employment eligibility, considering factors such as availability of qualified U.S. workers and the colleague's long-term prospects for securing lawful permanent residence, among other reasons. Employment applicants requiring immigration sponsorship must disclose, when initial application for employment is made, whether or not they are legally authorized to work for Click Therapeutics in the U.S. and, if so, whether that authorization permits them to work in the job they seek. In no case should Click Therapeutics support of a colleague's temporary visa application or sponsorship of a colleague for permanent residence be construed to guarantee success of that application or amend or otherwise invalidate the "at-will" employment relationship between the colleague and Click Therapeutics. Recruitment Phishing Scams: Fake job advertisements and offers are increasingly appearing on the internet. If you have encountered a job posting or have been approached with a job offer that you suspect may be fraudulent, we strongly recommend you do not respond and report it to the Federal Trade Commission and the FBI at . Please be mindful of the following: * Click Therapeutics will only reach out to you through an "@clicktherapeutics.com" email address. * Other than your email address or telephone number, which you may provide via a job application portal, Click Therapeutics will never ask you to provide personally identifiable information about yourself (such as a Social Security Number or Driver's License Number) via a messaging application (like that used on the LinkedIn platform or Microsoft Teams). * Click Therapeutics will conduct interviews face-to-face over Zoom. * All job postings will be listed on the Click Therapeutics official career page.

Job Description Are you passionate about information security and compliance, particularly in the fast-paced world of start-ups and venture capital (VC) firms? We are seeking a dedicated GRC Analyst IT Security professional to join our dynamic team! About the Role As our GRC Analyst, IT Security professional, you will play a vital role in creating, implementing, and enhancing effective information security and compliance frameworks tailored for our clients in the start-up and VC sectors. Your focus will be on developing efficient, audit-ready compliance programs that utilize integrated security solutions to drive success in dynamic environments. What We Offer: • Competitive pay, • Generous paid time off, • Full benefits packages (medical, dental, vision, 401K, and life insurance), • Opportunities for growth, • Takes initiative, is proactive, and self-motivated, • Strives for excellent communication with clients and team members;, • Thrives in the face of uncertainty, excited to create solutions;, • Is an excellent problem solver;, • Effectively communicates complex ideas or topics to a non-technical audience;, • Takes initiative and self-motivated;, • Has a strong internal locus of control;, • Believes in consistent professional development and growth;, • Is highly-likable; and,, • Guide start-up clients through the entire audit lifecycle, from readiness assessment and gap analysis to evidence collection and remediation, for frameworks like SOC 2 and ISO 27001., • Perform security and compliance due diligence assessments on behalf of clients to evaluate the risk posture of potential investment targets., • Monitor, triage, and respond to security alerts and events, with a focus on maintaining continuous compliance and addressing potential audit findings., • Act as a first responder for security incidents, executing containment and investigation procedures that align with the client’s compliance and reporting obligations., • Lead the security and compliance posture of clients' cloud, device management, and SaaS platforms by collaborating with IT Support to troubleshoot and remediate security or compliance issues, • Provide comprehensive training and guidance to client teams on security best practices and their specific responsibilities within a compliance framework., • Maintain proactive, clear, and regular communications with clients and internal stakeholders, providing status updates on audit readiness, active projects, and security posture., • Actively contribute to the creation and refinement of reusable compliance documentation, policy templates, and Standard Operating Procedures (SOPs) tailored for early-stage companies., • Install, configure, and manage security tools and controls required to meet specific compliance objectives, including endpoint protection, vulnerability scanners, and log management systems., • Conduct proactive system maintenance, policy tuning, and configuration audits to ensure continuous compliance and optimal security performance., • Design and implement scalable security and compliance roadmaps for start-up clients, ensuring alignment with their business goals, funding requirements, and industry best practices., • Consult with clients to assess their compliance needs, understand their objectives, and recommend appropriately-sized and innovative solutions or process enhancements., • Consult with our system engineering and network engineering teams to embed security and compliance controls into the development lifecycle ("security by design")., • Stay current with emerging security threats, compliance framework updates, and technologies relevant to the start-up ecosystem to continuously improve service quality., • Ensure all security implementations and support activities comply with relevant data protection regulations (e.g., GDPR, CCPA), company policies, and client-specific protocols., • Lead and track security awareness training campaigns using KnowBe4, including HIPAA, phishing, and general cybersecurity topics., • Deliver detailed, accurate, and timely reports, including audit readiness assessments, gap analyses, and due diligence findings., • Manage and prioritize daily tasks using internal tracking systems like Jira and Harvest., • Maintain clear, audit-ready documentation for security processes, procedures, and evidence of control implementation and effectiveness., • Develop and customize a complete suite of security policies and procedures for clients, including but not limited to Acceptable Use, Incident Response, and Business Continuity Plans., • Assist clients in gathering, managing, and presenting evidence to external auditors to ensure a smooth and successful audit process., • Contribute to the development of project estimates for compliance initiatives, manage the execution of the work, and maintain accountability for project timelines and deliverables., • Complete security questionnaires and assessments (e.g., CAIQ, State Ramp, etc) for clients, requiring in-depth knowledge of policies and technical controls., • Conduct and document vendor security reviews and due diligence against prospective and existing vendors., • Bachelor's degree, • 2+ years of post-collegiate technical experience, • Proven experience in an IT operations, information security, or compliance-focused role., • Strong understanding of information security frameworks and compliance standards (e.g., SOC 2, NIST, HIPAA)., • Experience with compliance platforms (Vanta, Loopio, etc) and IT management tools (Okta, Mosyle, Jira, Slack, 1Password, SentinelOne)., • Excellent written and verbal communication skills, with the ability to translate complex technical information into clear, concise documentation and presentations., • Demonstrated ability to manage multiple tasks and projects simultaneously, prioritize effectively, and meet deadlines., • Proactive and detail-oriented approach to problem-solving and documentation., • Adaptable and eager to learn new technologies and processes., • Experience with vendor management and due diligence., • Familiarity with various operating systems (macOS, Windows)., • Proven ability to work successfully with limited supervision., • Ego-less personality with excellent teamwork and communication skills., • High empathy and bedside manner for end-users., • Ability to deep-dive into research and find fixes when faced with unfamiliar technical hurdles or blockers, • Perseverance, resilience, and scrappiness in the face of challenges, • Ability to work effectively whether on-site, on the go, or remotely, • Ability to work in varying office cultures and able to blend in and work quietly and discreetly (when needed), • Must be trustworthy and able to maintain the confidentiality of all sensitive client data (able to sign NDAs as required)Company DescriptionFriendly technologists providing tailored solutions for your business. We focus on the tech, so you can focus on success. We pride ourselves on being a unique organization in today’s technology landscape. Born in 2013 out of a couture home IT support company in Brooklyn, Hi! Tech strategically pivoted into the business-to-business (B2B) client world and grew into a firm capable of taking on large-scale projects. All client experiences over the past 10 years have contributed to our evolution and helped us to become who we are today - a team of consultants who provide boutique, premium IT and technology support to our clients. Our organic growth has come from a strong client base and their referrals, the best testament to the work we do every day. So who are our clients? They exist in all ends of tech-forward industries, from television and digital media production to health and beauty to e-commerce and retail. We meet our clients where they are, and design and execute fully customizable IT solutions based on the growing needs of their business! Ways of working within our internal teams are collaborative and conversational, and we prioritize open communication and knowledge sharing. When your people come from as wide-ranging professional backgrounds as ours do, you always have something to learn from one another! Some questions we ask ourselves constantly: How can we do better? How can we make our work excellent? Our team members help push us to get there, and we grow alongside them. We believe in and are proud of taking care of our people. We offer competitive salaries and a complete benefits package, including generous paid time off, a 401(k) with a company match of up to 4%, medical, dental, and vision insurance with company contributions, life, and long-term disability insurance, commuter and cell phone reimbursements, IncentFit and CitiBike memberships, all paid for by the company. At Hi! Tech, we are committed to fostering an inclusive and accessible workplace. If you require reasonable accommodations during the application or interview process due to a disability, please contact us. We are excited to work with you to ensure a positive and equitable experience.Friendly technologists providing tailored solutions for your business. We focus on the tech, so you can focus on success.\r\n\r\nWe pride ourselves on being a unique organization in today’s technology landscape. Born in 2013 out of a couture home IT support company in Brooklyn, Hi! Tech strategically pivoted into the business-to-business (B2B) client world and grew into a firm capable of taking on large-scale projects. All client experiences over the past 10 years have contributed to our evolution and helped us to become who we are today - a team of consultants who provide boutique, premium IT and technology support to our clients. Our organic growth has come from a strong client base and their referrals, the best testament to the work we do every day.\r\n\r\nSo who are our clients? They exist in all ends of tech-forward industries, from television and digital media production to health and beauty to e-commerce and retail. We meet our clients where they are, and design and execute fully customizable IT solutions based on the growing needs of their business!\r\n\r\nWays of working within our internal teams are collaborative and conversational, and we prioritize open communication and knowledge sharing. When your people come from as wide-ranging professional backgrounds as ours do, you always have something to learn from one another! Some questions we ask ourselves constantly: How can we do better? How can we make our work excellent? Our team members help push us to get there, and we grow alongside them.\r\n\r\nWe believe in and are proud of taking care of our people. We offer competitive salaries and a complete benefits package, including generous paid time off, a 401(k) with a company match of up to 4%, medical, dental, and vision insurance with company contributions, life, and long-term disability insurance, commuter and cell phone reimbursements, IncentFit and CitiBike memberships, all paid for by the company.\r\n\r\nAt Hi! Tech, we are committed to fostering an inclusive and accessible workplace. If you require reasonable accommodations during the application or interview process due to a disability, please contact us. We are excited to work with you to ensure a positive and equitable experience.

Regulatory Response, Reporting, and Audit Evidencing: The DORA (Digital Operational Resilience Act) reporting workload has increased substantially, with ESMA conducting multiple audits in 2025. IT Risk and Compliance Analyst. This position will be a generalist, supporting various IT-GRC functions an

We're looking for a Cybersecurity Project Analyst to join our team at Click Therapeutics, Inc. Maintain awareness of emerging cybersecurity threats, regulatory requirements, and industry best practices across Information Security, Application Development, GRC to help drive organizational change.

As the senior-most GRC analyst, you will shape Schonfeld's GRC strategy while directly managing key policy, risk, and compliance initiatives. Senior Cybersecurity GRC Analyst. The Schonfeld Cybersecurity Operations team is seeking a Governance Risk & Compliance Analyst.

Information Security (Is) Governance, Risk Management And Compliance, Senior Analyst. Information Security (IS) Governance, Risk Management and Compliance, Senior Analyst. Administer and maintain GRC platform, AuditBoard and training and phishing awareness platform, KnowBe4.

How would you like to join one of the most highly regarded financial institutions in New Jersey with deep roots in the community? Provident is a successful and highly regarded multi-billion dollar bank that continues to grow with branches in New Jersey, Eastern Pennsylvania and New York. At Providen

Focus on the core content of the job post, removing all extra metadata, navigation mentions, and redundant headers.Keep the high signal to noise ratio, and make the content beautiful and condensed.