GRC Audit & Compliance Analyst

Job Description

The GRC Audit & Compliance Analyst plays a critical role in protecting Stride’s information systems, IT assets, and intellectual property from cyber threats, unauthorized access, data breaches, and destruction. This position ensures ongoing compliance with internal policies and external regulatory requirements through continuous monitoring and assessment.
This role is essential to maintaining Stride’s security posture and regulatory readiness in an evolving threat landscape.

Essential Functions: Reasonable accommodations may be made to enable individuals with disabilities to perform essential duties.

• Experience with risk assessments in conjunction with major regulatory initiatives (e.g., SOX, PCI-DSS, HIPAA, FedRAMP).
• Experience with cybersecurity and information security program management, frameworks, and methodologies (e.g., NIST CSF, ISO/IEC 27000, COBIT, etc.).
• Knowledge of applicable standards, requirements, and their application to the enterprise environment in cooperation with operational area SMEs.
• Experience with the creation, implementation, and maintenance of programs, policies, and procedures to be compliant with applicable technology-related regulations.
• Comprehensively perform and monitor IT compliance activities, including data collection, analysis, and remediation, working with internal and external audit teams as required.
• Support management in the design and operating efficiency testing of the IT department's control activity processes.
• Review audit assessments conducted by both internal and external audit teams.
• Collaborate with both internal and external auditteams.
• Coordinate external audit request responses and requests
• Provide relevant awareness training to control owners.
• Drive effective collaboration across all lines of business and provide relevant awareness training to control owners on IT compliance awareness.
• Drive continuous quality improvement.

Supervisory Responsibilities: This position has no formal supervisory responsibilities.

Minimum Required Qualifications:

• Bachelor’s degree in Computer Science, Information Systems, Information Security & Assurance, Information Technology, Audit, or related field required AND
• Three (3) years of experience in IT Security, IT Audit, IT Governance, Risk, & Compliance
• Equivalent combination of education and experience, including prior relevant military service experience.

Certificates and Licenses: None required.

OTHER REQUIRED QUALIFICATIONS:

• Demonstratable understanding of security controls and risk assessment tools.
• Demonstratable understanding of information security and the relationship between threat, vulnerability, and information value in the context of risk management.
• Demonstratable understanding of risk-based decision-making.
• Demonstratable understanding of leading-edge governance-enabling technologies.
• Ability to develop relationships across functions and inspire trust and confidence through effective communication and interpersonal skills.
• Experience managing cybersecurity controls based on a thorough understanding of industry standards and regulations to protect the company from external and internal threats.
• Excellent communication and presentation skills (verbal and written).
• Project management planning and organization skills.
• Ability to identify, document, and communicate information security issues to business and information owners.
• Ability to maintain the confidentiality of sensitive information.
• Microsoft Office (Outlook, Word, Excel, PowerPoint, Project, Visio, etc.); Web proficiency.
• Ability to clear required background checks.

Desired Qualifications:

• CISA, CRISC, CISM, SANS, or other relevant information security certifications
• Knowledge of relevant standards such as ISO/IEC 27000 family - Information Security Management Systems, NIST Cybersecurity Framework, NIST 800, and applicable laws related to regulatory compliance, information security, and privacy (e.g., SOX, HIPAA, GDPR, PCI-DSS)
• Experience with developing and maintaining information security policies and standards-aligned to regulatory or other control frameworks such as NIST, SOX, HIPAA, FERPA, etc.
• Prior experience in the Education industry is a plus.
• Knowledge and understanding of information technology and networking concepts.

WOrk Environment: The work environment characteristics described here represent those an employee encounters while performing the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform essential functions.

• This is an office- or home-based position. The noise level in the office is usually moderate (computers, printers, light foot traffic).

Compensation & Benefits: Stride, Inc. considers a person’s education, experience, and qualifications, as well as the position’s work location, expected quality and quantity of work, required travel (if any), external market and internal value when determining a new employee’s salary level. Salaries will differ based on these factors, the position’s level and expected contribution, and the employee’s benefits elections. Offers will typically be in the bottom half of the range.

• We anticipate the salary range to be $53,944.50- $77,000.00. The upper end of this range is not likely to be offered, as an individual’s compensation can vary based on several factors. These factors include, but are not limited to, geographic location, experience, training, education, and local market conditions. Eligible employees may receive a bonus. Stride offers a robust benefits package for eligible employees that can include health benefits, retirement contributions, and paid time off.

The above job is not intended to be an all-inclusive list of duties and standards of the position. Incumbents will follow any other instructions and perform any related duties as assigned by their supervisor. All employment is “at-will” governed by the state law where the employee works. It is further understood that the “at-will” nature of employment is one aspect that cannot be changed except in writing and signed by an authorized officer.

Job Type

Regular

The above job is not intended to be an all-inclusive list of duties and standards of the position. Incumbents will follow any other instructions, and perform any other related duties, as assigned by their supervisor. All employment is “at-will” as governed by the law of the state where the employee works. It is further understood that the “at-will” nature of employment is one aspect of employment that cannot be changed except in writing and signed by an authorized officer.

If you are a job seeker with a disability and require a reasonable accommodation to apply for one of our jobs, you can request the appropriate accommodation by contacting [email protected].

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities

Stride, Inc. is an equal opportunity employer. Applicants receive consideration for employment based on merit without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status, or any other basis prohibited by federal, state, or local law. Stride, Inc. complies with all legally required affirmative action obligations. Applicants will not be discriminated against because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant.

Originally posted on Himalayas

Apply Now