Security Analyst – GRC (Remote)

About the role

The Senior Security Analyst – GRC will support Jostens' security compliance and assurance programs, focusing on PCI DSS, SOC 2, SOX ITGC, ISO 27001‑aligned controls, customer assurance, and data privacy. This remote position coordinates audit readiness, manages evidence, tracks findings, and partners with technical and business teams to maintain compliance across applications, infrastructure, cloud services, and third‑party providers.

Key responsibilities

• Coordinate security compliance activities for PCI DSS, SOC 2, SOX ITGC, ISO 27001, and other audits.
• Maintain compliance calendars, audit workplans, control inventories, evidence trackers, and status reporting.
• Collect, validate, and organize audit evidence, control narratives, and management responses.
• Evaluate control design and operating effectiveness through walkthroughs and interviews.
• Identify control gaps, document findings, and track remediation to closure.
• Develop compliance dashboards, metrics, scorecards, and executive summaries.
• Handle privacy and security assurance activities, including customer security questionnaires and data protection reviews.

Required profile

• Bachelor’s degree in Information Systems, Cybersecurity, Accounting, Business, or related field, or equivalent experience.
• Minimum 5 years of experience in Information Security, GRC, IT Compliance, or IT Audit.
• Strong verbal and written communication skills and ability to work both independently and in a team.

Required skills

• Microsoft Word
• Microsoft Excel
• Microsoft Outlook
• PCI DSS
• SOC 2
• SOX ITGC
• ISO 27001