InfoSec GRC Analyst – Contract Compliance

QUALIFICATIONS:

• Strong understanding of contract compliance principles, including interpreting and updating contract terms to meet cybersecurity requirements and regulatory obligations.
• General understanding of audit and compliance methodologies, and familiarity with industry-accepted standards and frameworks.
• Ability to monitor, interpret, and assess the impact of emerging regulations on organizational processes and contracts.
• Proficiency in conducting evidence collection and supporting compliance control assessments and audits.
• Strong documentation and communication skills for preparing audit materials, maintaining records, and reporting compliance status.
• Competence in tracking and recording risks, issues, decisions, dependencies, and action items for audit and compliance initiatives.
• Strong collaboration skills, with the ability to build relationships with Finance, Risk, Compliance, Legal, and other departments.
• Possess general knowledge of laws and regulations pertinent to information security and the organization.
• Demonstrate familiarity with information security best practices and recognized frameworks.
• Excellent verbal and written communication skills.  Able to communicate persuasively and influence others.  
• Ability to work independently and collaboratively in a fast-paced environment.
• Demonstrate professional skepticism to ensure evidence is sufficient when assessing the relevant information security controls. 
• Candidates must possess either a bachelor’s degree or have between two and four years of experience in Information Security/Cybersecurity, Information Technology, Computer Science, or Information Systems.
• Desired Certifications (Any or Multiple)
• CompTIA Security+.
• GIAC Security Essentials Certification (GSEC).
• Certified Information Systems Auditor (CISA).
• Similar Cybersecurity certifications.

Preferred Location: MO

Certain states and localities require employers to post a reasonable estimate of salary range. A reasonable estimate of the current base pay range for this position is $77,200 to $96,500 annually. Actual salary will be based on a variety of factors, including shift, location, experience, skill set, performance, licensure and certification, and business needs. The range for this position in other geographic locations may differ. Certain positions may also be eligible for variable incentive compensation, such as bonuses or commissions, that is not included in the base pay.

The well-being of WWT employees is essential. So, when it comes to our benefits package, WWT has one of the best. We offer the following benefits to all full-time employees:

• Health and Wellbeing: Health, Dental, and Vision Care, Onsite Health Centers, Employee Assistance Program, Wellness program
• Financial Benefits: Competitive pay, Profit Sharing, 401k Plan with Company Matching, Life and Disability Insurance, Tuition Reimbursement
• Paid Time Off: PTO and Sick Leave (starting at 20 days per year) & Holidays (10 per year), Parental Leave, Military Leave, Bereavement
• Additional Perks: Nursing Mothers Benefits, Voluntary Legal, Pet Insurance, Employee Discount Program

We strive to create an environment where all employees are empowered to succeed based on their skills, performance, and dedication. Our goal is to cultivate a culture of belonging that encourages innovation, collaboration, and respect for all team members, ensuring that WWT remains a great place to work for All!

If you have any questions or concerns about this posting, please email [email protected].

#LI-SSJ1

#LI-REMOTE

 PLEASE NOTE:  This position requires permanent U.S. work authorization. Candidates requiring current or future visa sponsorship, including those on OPT, CPT or H1/H4, are not eligible for this role.  This role is not open for staffing partners or corp‑to‑corp candidates.

Why WWT?

At World Wide Technology, we work together to make a new world happen. Our important work benefits our clients and partners as much as it does our people and communities across the globe. WWT is dedicated to achieving its mission of creating a profitable growth company that is also a Great Place to Work for All. We achieve this through our world-class culture, generous benefits, and by delivering cutting-edge technology solutions for our clients.  

Founded in 1990, WWT is a global technology solutions provider leading the AI and Digital Revolution. WWT combines the power of strategy, execution, and partnership to accelerate digital transformational outcomes for organizations around the globe. Through its Advanced Technology Center, a collaborative ecosystem of the world's most advanced hardware and software solutions, WWT helps clients and partners conceptualize, test, and validate innovative technology solutions for the best business outcomes and then deploys them at scale through its global warehousing, distribution, and integration capabilities.  

With over 13,000 employees across WWT and Softchoice and more than 60 locations around the world, WWT's culture, built on a set of core values and established leadership philosophies, has been recognized 14 years in a row by Fortune and Great Place to Work® for its unique blend of determination, innovation, and creating a great place to work for all. 

Want to work with highly motivated individuals on high-performance teams?  Join WWT today! 

What will you be doing?

As an Information Security (InfoSec) Governance, Risk, and Compliance (GRC) Analyst within Audit and Compliance, you will play a pivotal role in ensuring that WWT’s information security practices not only align with internal policies but also fulfill the specific security and compliance requirements outlined in our client and partner contracts. This position involves interpreting contract provisions related to information security, collaborating with legal and operational teams to identify compliance obligations, and developing processes to monitor adherence. You will be responsible for supporting audits, managing documentation for contract-driven controls, and proactively addressing any gaps or exceptions. By championing contract compliance, you help build trust with clients and partners while safeguarding WWT’s reputation and operational excellence.

RESPONSIBILITIES:

Driving Operations within the InfoSec GRC Team

As an InfoSec GRC analyst, you are expected to:

• Leverage artificial intelligence (AI) powered tools to automate the identification of compliance gaps, enhance risk assessments, and streamline audit processes for improved efficiency and accuracy.
• Conduct routine cybersecurity audits to verify and ensure adherence to contractual obligations and security requirements.
• Evaluate and update cybersecurity provisions in contracts with clients and partners, ensuring they align with risk management strategies and comply with relevant regulations.
• Work closely with cross-functional teams to resolve audit findings, track corrective actions, and implement improvements as needed.
• Record and track risks, issues, decisions, dependencies, and action items associated with audit and compliance initiatives.
• Assist in developing, refining, and promoting cybersecurity policies, standard operating procedures, and employee training to strengthen overall contract compliance.
• Support internal and external audits by managing documentation for contract-driven controls and proactively addressing any gaps or exceptions.
• Monitor and report on security program metrics to provide insights into compliance status and areas for improvement.
• Coordinate on-site audit logistics, including room reservations, resource scheduling, and catering arrangements.
• Assist with the formulation and communication of audit plans, timelines, and progress updates to relevant stakeholders.
• Provide status and tracking updates on compliance efforts via status meetings, request logs, and other appropriate channels.

Foster and sustain collaborative relationships with departments, such as Finance, Risk, Compliance, and Legal.