Trust Analyst

Job not on LinkedIn

🔥 1 minute ago

🇺🇸 United States – Remote

💵 $114.8k - $165k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

🧐 Analyst

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 2%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Abnormal Security

WebsiteLinkedInAll Job Openings

501 - 1000 employees

🔒 Cybersecurity

Cybersecurity

Abnormal Security is a provider of cloud-native email security solutions that specializes in preventing a wide array of cyber threats. The company focuses on protecting businesses from attacks such as phishing, malware, ransomware, and social engineering, ensuring total protection for corporate email systems. Their offerings include business email security, phishing detection, and securing against account takeovers, making them a leader in the computer and network security space.

📋 Description

• Own and run AI Governance, Data Governance, Security Governance, and other governance committees; set agendas, facilitate stakeholders, and drive decisions to closure • Own the policy program end to end, including drafting, revising, maintaining policies, driving stakeholder review and acknowledgment, and managing the company’s Policy Center • Own risk management operations, including the risk register, risk assessments, risk exceptions, and enforcement of the 12-month exception cap with renewal review and documentation • Monitor regulatory and industry developments and advise leadership on program strategy and impact • Ensure program activities align with strategy and execute GRC milestones on time and to a high standard • Drive internal control effectiveness through monitoring, control enhancements, and guidance on control design and operations • Perform compliance readiness assessments and provide updates, recommendations, and roadmaps to senior management and business partners • Advise, educate, and train process, control, and risk owners on controls, documentation, and risk management responsibilities • Define and report key risk indicators and key performance indicators • Identify policy and process gaps or conflicts and develop solutions with business partners • Drive remediation and risk mitigation activities, including root cause analysis, action-plan design and tracking, and identifying recurring risk patterns • Design and manage program operations and supporting technology • Engage in ad hoc projects • Communicate control testing, audit, risk assessment, issue management, program health, accomplishments, and risks to project teams, partners, and senior management

🎯 Requirements

• 4–7 years of experience in cyber security, technology risk, GRC, and/or technical compliance roles • At least 2 years focused on ISO 27001 implementation and maintenance • Experience leading at least one full ISO 27001 certification cycle, including the 2022 revision, from start to finish • Project management experience across concurrent compliance projects, cross-functional teams, Agile or Waterfall methodologies, and tools such as ServiceNow • Experience owning or facilitating cross-functional AI, data, or security governance programs or committees • Strong understanding of security concepts, ISMS implementation and maintenance, control mapping across multiple frameworks, and continuous control monitoring and automation • Experience implementing and managing ISO 27001 and ISO 27701 compliance programs, including Statements of Applicability, risk treatment plans, risk acceptance criteria, internal audit programs, and management reviews • Experience working with external auditors and managing internal stakeholders • Experience with audit automation and continuous control monitoring tools • Ability to manage multiple stakeholders and vendors while maintaining project momentum • Bachelor’s degree or equivalent military experience (nice to have) • ISO 27001, ISO 27701, or ISO 42001 Lead Auditor Certification (nice to have) • CRISC, CISSP, CPA, CISA, PMP, or CISM certification(s) (nice to have) • Experience with NIST CSF, NIST SP 800-53/171, or other control frameworks (nice to have) • Familiarity with AI governance frameworks such as ISO/IEC 42001 and NIST AI RMF (nice to have) • Experience at a technology, SaaS/cloud, or regulated public company (nice to have) • 2+ years of Big 4 experience (nice to have)

🏖️ Benefits

• Bonus or incentive compensation may be available • Equity may be available • Comprehensive benefits package • Pre-employment checks aligned with applicable legislation and Abnormal AI’s security and privacy standards