Security GRC Analyst

Security GRC Analyst (Cloud/AWS) - Philippines Remote

• Full-time

Turnitin is a global organization with teams in over 35 countries including the United States, Mexico, United Kingdom, Australia, Japan, India, and the Philippines. We embrace a remote-centric culture and prioritize well-being with a comprehensive package. Our diverse community is united by a shared desire to make a difference in education.

Turnitin is seeking an experienced Security GRC Analyst with Cloud/AWS skills to join our Security & Compliance team. The analyst will ensure that information and cloud systems comply with relevant regulatory frameworks, industry standards, and internal policies, collaborate with various departments, monitor compliance, conduct assessments, and support initiatives to identify and mitigate risks.

This role reports to the GRC Information Security Manager.

Responsibilities:

• Maintain compliance tracking capabilities to help ensure adherence with Turnitin’s security program and industry standards such as NIST CSF, NIST 800-53, SOC 2, TX-RAMP and PCI DSS.
• Conduct risk and compliance assessments, audits, and risk evaluations to identify potential risk and compliance gaps.
• Lead preparation and audit activities required to maintain our SOC 2 Type 2.
• Collaborate with internal teams and external auditors for audit and compliance reviews.
• Collaborate with sales and customer support teams to respond to security questionnaires and security posture questions from customers.
• Support TPRM Program and conduct third-party risk assessments.
• Complete user access reviews.
• Administration of GRC platform.
• Participate in the development and documentation of security policy, standards and processes to align with company information security strategy.
• Provide security awareness and phishing training for employees and promote a culture of security and compliance.
• Coordinate phish testing.
• Collaborate with DevOps, IT, Legal, Engineering, People Team, and other departments to ensure security control and policy requirements are integrated into systems and business processes.
• Automate manual compliance tasks and improve team processes.
• Leverage AWS and Wiz for continuous monitoring.
• Measure effectiveness vs just implementation.

Work Hours:

Candidate must be willing to work according to U.S. Eastern Time (ET).

Qualifications:

• Bachelor’s degree in Computer Science, Information Security, or a related field (or equivalent experience).
• 3+ years of experience in a role related to Information Security.
• 1+ years AWS Cloud Services and basic scripting.
• Professional certification such as CCSK, AWS Cloud Practitioner, or other related industry certification.
• Familiarity with cybersecurity frameworks and regulatory standards such as NIST, SOC 2, TX-RAMP, and PCI DSS.
• Familiarity of risk management and security best practices.
• Experience with assessing security controls, risk mitigation strategies, and audit procedures.
• Understanding of concepts related to AWS Cloud Infrastructure and security.
• Experience conducting security impact analysis for system changes.
• Experience conducting periodic internal security reviews or risk assessments to ensure that compliance procedures and technical configurations are followed.
• Experience conducting third-party risk assessments.
• Contract review experience for security requirements.
• Highly organized and proactive individual capable of managing multiple responsibilities and delivering results.

Preferred Skills:

• Experience running SOC 2 audits or NIST based authorizations.
• Experience using Jira and Confluence for project and task management.
• Hands-on experience with Wiz, KnowBe4, and Hyperproof.
• Experience conducting third-party risk assessments.
• Demonstrated knowledge of security assessment of cloud technology and services (AWS).
• Entry level cybersecurity certification such as Security+, GIAC GSEC, or ISC2 Certified in Cybersecurity.

Technical skills:

• Cloud Infrastructure with general knowledge of AWS services such as CloudFormation, Serverless, AWS Config, CloudTrail, IAM, and JSON
• Basic scripting

Total Rewards @ Turnitin
Turnitin maintains a Total Rewards package that is competitive within the local job market. Beyond the intrinsic rewards of unleashing your potential to positively impact global education, and thriving in a collaborative, inclusive environment, extrinsic rewards include generous time off and health and wellness programs that offer choice and flexibility. The organization supports a remote-centric culture with a comprehensive package prioritizing well-being.

Our Mission is to ensure the integrity of global education and meaningfully improve learning outcomes.

Our Values underpin everything we do.

• Customer Centric - We put educators and learners at the center of everything we do to ensure integrity and improve learning outcomes.
• Passion for Learning - We seek teammates who are constantly learning and growing and build a workplace that enables them to do so.
• Integrity - The heartbeat of Turnitin; it shapes our products, how we treat each other, and how we work with customers and vendors.
• Action & Ownership - A bias toward action and empowerment to make decisions.
• One Team - We break down silos, collaborate, and celebrate successes.
• Global Mindset - We respect local cultures and embrace diversity; we think globally and act locally to maximize impact.
• Remote First Culture
• Health Care Coverage*
• Education Reimbursement*
• Competitive Paid Time Off
• 4 Self-Care Days per year
• National Holidays*
• Charitable contribution match*
• Monthly Wellness or Home Office Reimbursement/*
• Access to Modern Health (mental health platform)
• Retirement Plan with match/contribution*

* varies by country

Seeing Beyond the Job Ad
We recognize it’s unrealistic for candidates to fulfill 100% of the criteria in a job ad. If you’re willing to learn and evolve alongside us, join our team

Turnitin, LLC is committed to equal access to its programs, facilities, and employment. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.