Job Application for GRC Analyst at Rhymetec

Job Title: GRC Analyst
Location: Remote (London area)
Employment Type: Full-time, Permanent Role

About Rhymetec:
Rhymetec was founded in New York City in 2015, growing steadily in the areas of compliance, cybersecurity and data privacy. Our mission is to ensure our clients are compliant faster, so they can focus on their core business and less on the complexities of building effective and compliant infosec programs.

Job Description:
We are seeking a GRC Analyst to join our growing team in the UK! The CSA will be responsible for supporting the development and implementation of solutions that help Rhymetec's clients achieve, manage and measure security metrics and compliance requirements. The role will work closely with their Security Program Manager to help design and deliver security and compliance objectives and have the ability to help drive foundational changes in internal cloud platforms to enhance their security posture. The ideal candidate will have a team first mentality and fit within the core values and culture at Rhymetec. This person will be responsive to both customers and team members with communications, be detail oriented, and hold a high level of autonomy to complete work on time and with quality.

Responsibilities:

Prepare agendas and supporting materials for client business.
Conduct meetings with clients regularly.
Configure performance monitoring alarms in AWS, Azure, GCP, Datadog and other cloud infrastructures.
Configure Security alarms and Intrusion Detection Systems in AWS, GCP, Azure.
Set up supporting security applications.
Set up mobile device management applications such as Jamf, Jumpcloud, Microsoft Endpoint manager, Hexnode, etc.
Configure and maintain compliance monitoring platforms.
Conduct internal audits, risk assessments, and generate reports.
Conduct Incident Response Tabletop exercises with clients.
Conduct Business Continuity and Disaster recovery tabletop exercises with clients.
Support clients in mapping frameworks/controls such as SOC 2 Type 2, ISO 27001, GDPR, and DORA into actionable items for clients.
Conduct employee access reviews, SaaS vendor security assessments, and Gap assessments.
Triage bug/vulnerability reports from security researchers.
Complete security questionnaires on behalf of clients.
Draft supporting documents for clients’ information security management systems and information security policies.
Gather & maintain evidence of compliance for various frameworks.
Lead engagements with auditors on behalf of clients.
Communicate tasks to clients’ employees and educate clients on security best practices.

Qualifications:

Knowledge of compliance and regulatory frameworks (PCI, ISO/IEC, SOC 2, DORA, GDPR)
Strong logical security skills, with experience in cloud security
Understanding of cloud environments (AWS, GCP, Azure) and integrating security controls through DevOps and Infrastructure as a Service (IaaS) techniques
Experience in customer service and ability to develop professional relationships with customers

Must Haves:

Bachelor's degree or equivalent experience related to the technology or cyber security field
Bilingual in German and/ or French
4+ years of work experience in technology or cybersecurity.
Ability to flex and adapt to innovative and changing work demands.
Travel up to 2 weeks out of the calendar year.

Rhymetec Benefits

Comprehensive, company-funded private medical insurance for employees
Dental and Vision benefits
Generous annual leave package, plus sick time and 8 Paid Holidays
Workplace pension
Wellbeing Support: An annual subscription to TalkSpace, our online counselling and therapy service

Rhymetec is committed to creating a diverse environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment regardless of race, colour, religion, gender, gender identity or expression, sexual orientation, national origin, genetic background, disability, age, or veteran status.

Create a Job Alert

Interested in building your career at Rhymetec? Get future opportunities sent straight to your email.

First Name

Last Name

Preferred First Name

Country

Phone

Location (City)

Resume/CV*

Accepted file types: pdf, doc, docx, txt, rtf

Cover Letter

Accepted file types: pdf, doc, docx, txt, rtf

LinkedIn Profile

Do you have at least 4 years experience within cybersecurity?

Select...

Do you have external security customer experience? (i.e. working with a team that is does cybersecurity services for an external customer/company).

Have you supported an internal audit on behalf of your company or a customer?

What experience do you have with regulatory compliance frameworks (e.g., ISO 27001, DORA, GDPR, etc.)? Please provide a brief example.

Have you integrated security controls in cloud infrastructures (AWS, GCP, Azure)?

Do you currently have the legal right to work in the UK?

Select...

Will you require visa sponsorship either now or in the future?

Select...

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in Rhymetec’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

Gender

Select...

Are you Hispanic/Latino?

Select...

Race & Ethnicity Definitions

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Veteran Status

Select...

GRC Analyst

Apply for this job

Voluntary Self-Identification