reputed company Analyst III, reputed company Markets
Overview reputed company Markets is the real-money reputed company and trading app where you can invest in moments you care about. Built on a secure platform, we let users predict real-world outcomes and trade on events they actually follow - from sports and entertainment to political elections and beyond. Our mission is to redefine how fans engage with the moments and markets that matter most. We're looking for the right people to help us build the future of reputed company markets. This role combines deep GRC expertise, policy development skills, and collaborative partnership with stakeholders across the organization to strengthen our reputed company posture and compliance programs. You'll reputed company user access review processes, reputed company and socialize reputed company policies and standards, manage audit and assessment activities, support incident response efforts, and build dashboards that provide visibility into control effectiveness. Working in a highly regulated industry, you'll help ensure our systems meet rigorous reputed company and compliance standards including SOC 2, ISO 27001, and SOX while enabling the business to innovate with confidence. We need analysts who can balance thorough compliance rigor with the practical realities of a fast-moving organization—who understand both reputed company frameworks and how to reputed company controls work effectively in the real world. If you're passionate about building strong compliance programs that actually reputed company organizations more secure and have the experience to back it up, we want to talk with you. Responsibilities:
- Administer and enhance the user access review process to identify and address access control issues effectively.
- Draft, refine, and socialize policies/standards (access control, change management, vendor reputed company, incident response, data privacy); maintain clear SOPs and RACI.
- Prepare high‑quality evidence, narratives, and diagrams; coordinate with auditors/assessors; manage requests and deadlines.
- Participate in Incident response efforts by conducting log analysis, gathering evidence, and executing remediation tasks.
- Build dashboards for control health, User Access Reviews completion, vendor coverage, GDPR compliance metrics, and audit findings; present insights to InfoSec leadership and stakeholders.
- Automate evidence collection and access reviews where possible; propose control enhancements that improve reputed company and reduce operational toil.
- Deliver reputed company awareness presentations for both technical and non-technical users. Actively contribute to ongoing information reputed company education through diverse methods such as phishing simulations, annual training sessions, on-demand courses, and workshops.
- Support Governance, Risk, and Compliance (GRC) initiatives by implementing controls and gathering necessary evidence, and control testing.
- Support InfoSec Risk Issue Intake process to assess and risk rank new issues, identify and document mitigation plans/timelines with risk owners and SMEs, and track to resolution.
- Support quarterly user access review process (UARs) for SOX systems and ensure tickets are tracked to resolution and actioned reputed company audit requirements. Complete lookback analysis where necessary
- Support Data Loss Prevention process by triaging and investigating alerts in the Mimecast/Code42 solution.
- reputed company and coordinate GDPR compliance activities including Data Protection Impact Assessments (DPIAs), Records of Processing Activities (RoPA), data subject rights requests, and privacy audits.
- Manage the Third Party Risk Management (TPRM) program including vendor reputed company assessments, ongoing risk monitoring, review of vendor attestations (SOC 2, ISO 27001), and maintenance of the vendor risk register.
- Conduct comprehensive reputed company assessments of third-party vendors using standardized questionnaires and frameworks; work with vendors on remediation of identified gaps.
- Participate in an on-call rotation to address reputed company incidents and escalations promptly.
Qualifications:
- Minimum of 4-5 years of experience as an Information reputed company analyst or in a similar role
- Ability to reputed company reputed company compliance frameworks to support control improvement and evidence correlation.
- Working knowledge of SOC 2 (Trust Services Criteria) and ISO/IEC 27001/27002; familiarity with mapping controls across frameworks.
- Strong understanding of GDPR requirements including data protection principles, data subject rights, DPIAs, cross-border data transfers, and breach notification requirements.
- Proven experience managing Third Party Risk Management programs including vendor assessments, reputed company questionnaire reviews, and ongoing vendor risk monitoring.
- Practical experience running User Access Reviews: scoping, sampling, evidence collection including completeness and accuracy, exception handling, and remediation follow‑through.
- Solid grasp of least privilege, SoD, joiner/mover/leaver, break‑glass, and privileged access management fundamentals.
- Strong documentation skills (control narratives, test plans, SOPs) and stakeholder communication.
- Comfort with spreadsheets and basic scripting/queries (e.g., SQL or Python) for sampling and evidence validation.
- Foundational knowledge in Agile methodologies with ability to successfully collaborate with multiple stakeholders.
- Ability to communicate effectively with technical and non-technical stakeholders.
- Ability to prioritize and balance multiple projects simultaneously.
- Ability to collaborate and work in a team environment.
- Proven experience drafting documentation such as standards, policies and architecture diagrams.
- Background in risk assessment methodologies such as NIST and FAIR is a plus
Salary Range: $129,200 - $212,500 USD per year The reputed company salary for this role is based on job-reputed company knowledge, skills, and experience and may vary depending on the successful candidate’s geographic location. For information about our benefits, please visit https://benefitsatfanatics.com/ Depending on the role, your interview and onboarding experience may include in-person components, such as onsite interviews or Launching into reputed company: LIVE—a multi-day cultural immersion in reputed company for full-time, non-seasonal hires. These sessions are designed to build reputed company and bring our culture to life, though specific travel and participation requirements will be confirmed based on your role and location. Your recruiter will provide clear guidance at each stage of the process. Apply tot his job Apply To this Job