Governance, Risk and Compliance Analyst at Omilia - Conversational Intelligence | Torre

Governance, Risk and Compliance Analyst

Emma highlights
This highlight was written by Emma’s AI. Ask Emma to edit it.
Full-time

USD75.4K - 100K/year

~COP150M - 200M/year

+ Equity

+ Bonuses

location_on
Remote (anywhere)
Posted about 3 years ago

Responsibilities


Omilia is a company that focuses on the development, implementation, and ongoing management of security governance, risk, and compliance program. They are involved in creating cutting-edge technology products that are making a global impact in the service industry. The Governance, Risk and Compliance Analyst will be a member of the Information Security & Data Protection Office, working on the development, implementation, and ongoing management of Omilia’s security governance, risk, and compliance program. The role involves facilitating risk assessments, collaborating with IT and business teams to analyze and define security policies and information security standards, and contributing to a culture where security and risk management are considered foundational. Responsibilities: - Define IT security and data protection standards and develop policies, procedures, and other formalised documentation to support compliance, as well as security and privacy performance across the organisation - Maintain technical and project documentation related to security and data privacy projects, controls, configurations, and procedures - Perform periodic gap assessments to validate compliance on an ongoing basis - Drive the required initiatives to support the compliance with required frameworks and standards (e.g., PCI-DSS, GDPR, HIPAA, CCPA, PIPEDA) - Perform security, privacy and compliance assessments on new and existing systems, processes, technology - Conduct periodic security audits against documented controls and remediate findings - Coordinate security risk assessments for new products & solutions - Maintain a risk register with clearly defined owners for each risk - Perform business impact analysis and assist with development of IT/InfoSec risk registry - Develop and deliver training and awareness content to educate the business about security risks, IT security controls and other GRC programs as needed - Support vendor due-diligence process and help lead and define overall third-party risk management efforts - Participate in security event analysis and incident response