Cybersecurity Governance Analyst
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Cybersecurity governance analyst developing enterprise policies, vendor risk assessments, and compliance controls. Supporting Agero’s digital driver assistance services through audits, remediation, and security awareness.
Responsibilities:
- Develop and maintain enterprise cybersecurity policies and standards
- Partner with key IT leaders to ensure security information is updated and accurate
- Drive security awareness across the organization
- Coordinate security assessments, identify risks, and recommend appropriate corrective action
- Align processes with frameworks such as ISO 27001, PCI-DSS, and SOC 2
- Perform vendor security and privacy risk assessments
- Evaluate control environments, monitor findings, and track vendor remediation efforts
- Respond to client security questionnaires and coordinate evidence collection
- Support customer trust reviews and external audits
- Provide guidance on access management, data encryption, logging, and business continuity controls
- Investigate control deficiencies and recommend and track corrective actions
- Liaise between business units and IT/Engineering teams to support data security implementations
- Drive enterprise-wide security awareness programs
- Partner with IT and Engineering leaders to refine enterprise security architecture and support security control assessment strategies
Requirements:
- 3-5 years in information security compliance
- Hands-on experience with PCI-DSS, SOC 2, or ISO 27001
- Experience maintaining compliance documentation
- Ability to map controls to technical implementations and evaluate evidence quality
- Ability to identify, evaluate, and mitigate security risks across application, network, endpoint, and cloud environments
- Knowledge of DevSecOps practices and emerging technologies such as AI
- Comprehensive understanding of ISO 27001, PCI-DSS, and SOC 2 control frameworks
- Ability to build productive relationships with IT management, technical staff, external vendors, and consultants
- Strong written and oral communication skills
- Ability to author technical documentation, deliver security presentations, and complete complex client security questionnaires
- Ability to rapidly learn and apply advanced technical security concepts
- Strong analytical skills, attention to detail, independent judgment, and effective decision-making
- Must be currently authorized to work in the United States on a full-time basis
- Position is not eligible for employer visa sponsorship now or in the future
Benefits:
- Healthcare, dental, vision, disability, life insurance, and mental health benefits for associates and their families
- 401(k) plan with company match
- Tuition assistance
- Flexible time off
- Paid sick leave
- Ten paid holidays annually
- Parental planning benefits
- Bonus/Incentive Programs
- Initial onboarding travel to Medford with travel arrangements and expenses handled by Agero
Similar Jobs
Senior Software Engineer – Security, Distributed Systems
Senior software engineer building backend distributed systems for RapidFort’s cybersecurity and software supply chain platform. Developing secure, scalable services across Linux, containers, Kubernetes, and cloud environments.
Staff Security Engineer, Proactive Security
Staff Security Engineer leading proactive security services, infrastructure protection, and secure engineering paths at DoorDash. Building resilient products for the technology and logistics company’s delivery network.
Managing Director, Enterprise Security Architecture – Engineering
Managing Director leading enterprise security architecture and cybersecurity platforms for The Cigna Group. Advancing cloud, DevSecOps, AI security, and cyber defense at scale.
Offensive Security Engineer / Penetration Tester
Offensive Security Engineer conducting web, mobile, Active Directory and cloud penetration tests for Genesis’s global product IT ecosystem. Building automation and AI-agent workflows for offensive security.
Senior Data Security Specialist – Data Security Strategy
Especialista sênior liderando estratégia de segurança e governança de dados corporativos. Proteção de informações sensíveis com DLP, DSPM, Purview e ambientes cloud.
Senior Manager, Global Security Technology
Global Security Technology leader shaping strategy, platforms, and modernization. Managing enterprise security projects, vendors, budgets, and global capability delivery for Johnson & Johnson healthcare operations.
Industry Sales Director – Security, Surveillance & Video Connectivity
Industry Sales Director driving enterprise sales, account expansion, and partner growth for Webbing’s global cellular connectivity platform. Owning the Security & Video vertical worldwide.
Senior Information Security Engineer
Senior Security Engineer owning KPA’s enterprise security platforms, cloud, identity, and automation. Improving security across workplace-safety software, infrastructure, DevOps, and compliance environments.
Senior Software Engineer, Security
Security engineer building automated application and infrastructure security for Flex’s AI-native private bank. Protecting money movement, cloud access, vulnerability management, and secure development at scale.
Chief Information Security Officer – CISO
CISO leading cybersecurity strategy, operations, risk, and resilience for Sydney Airport’s critical aviation infrastructure. Advising executives and the Board while developing high-performing security teams.
Information Security Program Manager
Information security program manager managing U.S. customer portfolios for Cofense, a phishing defense company. Delivering simulated phishing programs, remediation reporting, and security guidance.
Head of IT, Security
Head of IT and Security owning identity, compliance, IT, and application security. Protecting OpenEd’s education platform and data for over 100,000 students.
Information Security Specialist – SoD Governance, Segregation of Duties
Especialista em segurança da informação governando SoD, IAM e RBAC na Avvale. Mitigação de riscos de acesso e conformidade para soluções empresariais inovadoras e sustentáveis.
Principal Security Engineer
Principal Security Engineer governing Fortive’s multi-cloud, AI, GitHub, and security architecture. Advising executives and leading enterprise technology strategy, governance, security, and modernization.
Security Engineering Lead
Security Engineering Lead building Product Security for Attio’s AI-native CRM. Securing customer data, leading incident response, and hiring the security team.
Security Engineering Lead
Security Engineering Lead building Attio’s Product Security function for its AI-native CRM platform. Leading application security, incident response, and security team growth.
Senior Cloud Security Engineer
Senior Cloud Security Engineer securing Omilia’s AWS conversational AI platform. Automating Terraform, GitOps, CI/CD, and cloud compliance across distributed engineering teams.
Consultor Sailpoint ISC – Identity Security Cloud
Consultor SailPoint ISC en Devoteam, consultora europea de estrategia digital y ciberseguridad. Despliegue, integración y evolución de soluciones Cyber IAM para clientes.
Senior Security Engineer – AI Focus
Senior Security Engineer securing AI/ML systems for Euna Solutions, a cloud-based public-sector software provider. Driving AI security, automation, governance, and compliance across the development lifecycle.
Senior Security Engineer – AI Focus
Senior Security Engineer securing AI/ML systems at Euna Solutions, a cloud software provider for public-sector organizations. Driving AI security automation, governance, compliance, and secure development practices.