GRC Analyst

Job not on LinkedIn

November 8

Apply Now

Receive Emails with Similar Jobs

Kobalt Music

WebsiteLinkedInAll Job Openings

Music • Entertainment

Kobalt Music is a company dedicated to empowering music creators by providing them with more creative freedom, transparency, and faster payments. With a global reach, including offices from Los Angeles to Sydney and Berlin, Kobalt Music's creative team connects artists with opportunities in advertisements, TV shows, films, and games. The company streamlines the complex process of music payments and leverages technology to provide transparency, ensuring artists have access to their rights and royalties at their fingertips. Kobalt Music is a bridge between creators and the global entertainment industry.

501 - 1000 employees

Founded 2000

💰 $550M Debt Financing on 2022-03

📋 Description

• Lead and conduct internal audits against the ISO 27001 framework to ensure compliance, identify non-conformities, document internal audit findings and complete executive reviews • Assist vCISOs and Security Analysts in supporting clients with their compliance journey - perform comprehensive security reviews of third-party vendors to assess their security posture and manage supply chain risk, and respond to client and prospect security questionnaires in a timely manner • Help drive improvements in our best-in-class security services through the creation of internal knowledge-base articles and GRC documentation • Support the design and development of Kobalt's service offerings through insightful feedback and a positive attitude • Build new tools and techniques to compress human-intensive tasks into work that can be achieved in a fraction of the time • Support the design and development of Kobalt’s service offerings through insightful feedback and a positive attitude as a contributing member of our security delivery team • Help drive improvements in our best-in-class security services through the creation of knowledge-base articles and services documentation • Respond to and engage our customers through our ticket system, chat, email, phone, or other mediums as required • Complete technical certifications to help gain the necessary technical knowledge and support Kobalt vendor partnerships

🎯 Requirements

• 2 years of experience in GRC, Internal Audit, Information Security, Technology Risk, or related fields • Direct experience with governance frameworks, particularly ISO 27001, and experience conducting internal audits • Customer-first focus, with the ability to support both internal teams and external client inquiries • Excellent ability to communicate effectively, both verbally and in writing, with clients and internal audiences • Strong understanding of cybersecurity domains, including Security Operations, Security Engineering, and Information Risk Management • Exceptional written communication skills, with a demonstrated ability to produce clear, concise, and professional reports for various audiences • Self-initiative with strong time management and the ability to perform in high-paced environments • Can work independently and with teams to identify and resolve challenges and overcome roadblocks • Ability to quickly learn and adapt security best practices to a wide variety of technologies • Nice to have: Professional certification such as CISA, ISO 27001 Lead Auditor/Implementer, or GRCP™ is desired but not required • Enthusiasm, curiosity, and a thirst for knowledge • Familiarity with technical system access controls and how to apply them • A strong team player with the ability to provide on-the-job training and knowledge sharing to other team members • Familiarity with GRC platforms, like Vanta.

🏖️ Benefits

• Competitive salary and equity options • Comprehensive health, dental, and vision insurance • Flexible work arrangements within the required time zone • Professional development opportunities • Fun and inclusive company culture