Security Analyst – GRC (SOC 2, PCI DSS, SOX)

About the role

The Security Analyst – GRC will ensure our organization meets SOC 2, PCI DSS, and SOX compliance requirements. Working remotely from the Dominican Republic, you will collaborate with cross‑functional teams to collect, assess, and present evidence that satisfies security standards.

Key responsibilities

• Lead or support the development and maintenance of the SOC 2 program, including policies, procedures, and controls.
• Conduct internal assessments, identify risks, and coordinate mitigation actions for SOC 2 compliance.
• Assist with Jostens Information Security, PCI DSS, and SOX program compliance.
• Facilitate audits and assessments against standards such as ISO 27000, PCI DSS, and SOX.
• Perform risk assessments, document evidence, and ensure proper risk treatment.
• Coordinate third‑party risk management and privacy requests with legal and IT teams.
• Develop, deliver, and evaluate training courses related to security and compliance.
• Report security metrics regularly and propose improvements.

Required profile

• Bachelor’s degree in Business, Accounting, Information Security, Cybersecurity, or related field, or equivalent experience.
• Minimum 1 year of experience in Information Security, IT Audit, or a related role (5 years preferred).
• Strong analytical, problem‑solving, and communication skills.
• Ability to work independently in a fast‑paced environment and manage multiple priorities.

Required skills

• SOC 2 compliance (including Type 2 audits)
• PCI DSS compliance
• SOX compliance
• ISO 27000 standards
• Security risk assessment
• Third‑party risk management