InfoSec GRC Analyst – Contract Compliance

QUALIFICATIONS:

• Strong understanding of contract compliance principles, including interpreting and updating contract terms to meet cybersecurity requirements and regulatory obligations.
• General understanding of audit and compliance methodologies, and familiarity with industry-accepted standards and frameworks.
• Ability to monitor, interpret, and assess the impact of emerging regulations on organizational processes and contracts.
• Proficiency in conducting evidence collection and supporting compliance control assessments and audits.
• Strong documentation and communication skills for preparing audit materials, maintaining records, and reporting compliance status.
• Competence in tracking and recording risks, issues, decisions, dependencies, and action items for audit and compliance initiatives.
• Strong collaboration skills, with the ability to build relationships with Finance, Risk, Compliance, Legal, and other departments.
• Possess general knowledge of laws and regulations pertinent to information security and the organization.
• Demonstrate familiarity with information security best practices and recognized frameworks.
• Excellent verbal and written communication skills.  Able to communicate persuasively and influence others.  
• Ability to work independently and collaboratively in a fast-paced environment.
• Demonstrate professional skepticism to ensure evidence is sufficient when assessing the relevant information security controls. 
• Candidates must possess either a bachelor’s degree or have between two and four years of experience in Information Security/Cybersecurity, Information Technology, Computer Science, or Information Systems.
• Desired Certifications (Any or Multiple)
• CompTIA Security+.
• GIAC Security Essentials Certification (GSEC).
• Certified Information Systems Auditor (CISA).
• Similar Cybersecurity certifications.

Preferred Location: MO

Certain states and localities require employers to post a reasonable estimate of salary range. A reasonable estimate of the current base pay range for this position is $77,200 to $96,500 annually. Actual salary will be based on a variety of factors, including shift, location, experience, skill set, performance, licensure and certification, and business needs. The range for this position in other geographic locations may differ. Certain positions may also be eligible for variable incentive compensation, such as bonuses or commissions, that is not included in the base pay.

The well-being of WWT employees is essential. So, when it comes to our benefits package, WWT has one of the best. We offer the following benefits to all full-time employees:

• Health and Wellbeing: Health (Medical & Prescription), Dental, and Vision Care, Onsite Health Centers (MO & IL), Employee Assistance Program, Wellness program
• Financial Benefits: Competitive Pay, Profit Sharing, 401k Plan with Company Matching, Life and Disability Insurance, Flexible Spending Accounts, Tuition Reimbursement
• Paid Time Off: PTO & Holidays, Parental Leave, Medical Leave, Military Leave, Bereavement, Day of Caring
• Additional Perks: Family Planning Benefits, Nursing Mothers Benefits, Voluntary Legal, Voluntary Supplemental Accident/Illness/Hospital, Voluntary ID Theft, Pet Insurance, Employee Discount Program

Note: This is not an all-encompassing list and should not be used as a complete description of the plan’s benefits. For more information, see our US Benefits Website 

We strive to create an environment where all employees are empowered to succeed based on their skills, performance, and dedication. Our goal is to cultivate a culture of belonging that encourages innovation, collaboration, and respect for all team members, ensuring that WWT remains a great place to work for All!

If you require accessibility accommodation(s) or adjustment during any stage of the hiring process, please let your WWT Recruiter know. The recruiter will work with you to understand your needs and help ensure an accessible experience throughout the interview process. 

If you have any questions or concerns about this posting, please email [email protected].

#LI-SSJ1

#LI-REMOTE

PLEASE NOTE:  This position requires permanent U.S. work authorization. Candidates requiring current or future visa sponsorship, including those on OPT, CPT or H1/H4, are not eligible for this role.  This role is not open for staffing partners or corp‑to‑corp candidates.

Why WWT?

World Wide Technology (WWT) strives to make a new world happen. WWT's work benefits clients and partners as much as it does its people and community across the globe. 

Founded in 1990, WWT brings together strategy, deep technical expertise and world-class partnerships to help public and private sector organizations design, build and scale intelligent AI, digital, cybersecurity, cloud and infrastructure solutions. Through its Advanced Technology Center (ATC)—a collaborative ecosystem featuring state-of-the-art hardware and software—WWT enables clients and partners to conceptualize, test and validate innovative technology and then deploy solutions at scale using its global integration and distribution capabilities. 

With more than 14,000 team members and over 60 locations globally, WWT's culture—grounded in core values and leadership philosophies—has been recognized by Fortune® and Great Place to Work for its commitment to innovation, trust and creating a great place to work for all. WWT provides products and services to large enterprise, global service provider and public sector clients in up to 130 countries across six continents. Softchoice, a World Wide Technology company, supports commercial and SMB markets in the U.S. and Canada. 

Want to work with highly motivated individuals on high-performance teams? Join WWT today! 

What will you be doing?

As an Information Security (InfoSec) Governance, Risk, and Compliance (GRC) Analyst within Audit and Compliance, you will play a pivotal role in ensuring that WWT’s information security practices not only align with internal policies but also fulfill the specific security and compliance requirements outlined in our client and partner contracts. This position involves interpreting contract provisions related to information security, collaborating with legal and operational teams to identify compliance obligations, and developing processes to monitor adherence. You will be responsible for supporting audits, managing documentation for contract-driven controls, and proactively addressing any gaps or exceptions. By championing contract compliance, you help build trust with clients and partners while safeguarding WWT’s reputation and operational excellence.

RESPONSIBILITIES:

Driving Operations within the InfoSec GRC Team

As an InfoSec GRC analyst, you are expected to:

• Leverage artificial intelligence (AI) powered tools to automate the identification of compliance gaps, enhance risk assessments, and streamline audit processes for improved efficiency and accuracy.
• Conduct routine cybersecurity audits to verify and ensure adherence to contractual obligations and security requirements.
• Evaluate and update cybersecurity provisions in contracts with clients and partners, ensuring they align with risk management strategies and comply with relevant regulations.
• Work closely with cross-functional teams to resolve audit findings, track corrective actions, and implement improvements as needed.
• Record and track risks, issues, decisions, dependencies, and action items associated with audit and compliance initiatives.
• Assist in developing, refining, and promoting cybersecurity policies, standard operating procedures, and employee training to strengthen overall contract compliance.
• Support internal and external audits by managing documentation for contract-driven controls and proactively addressing any gaps or exceptions.
• Monitor and report on security program metrics to provide insights into compliance status and areas for improvement.
• Coordinate on-site audit logistics, including room reservations, resource scheduling, and catering arrangements.
• Assist with the formulation and communication of audit plans, timelines, and progress updates to relevant stakeholders.
• Provide status and tracking updates on compliance efforts via status meetings, request logs, and other appropriate channels.

Foster and sustain collaborative relationships with departments, such as Finance, Risk, Compliance, and Legal.