What you'll be doing:

• Working closely with the Director of Risk and Compliance to continuously improve Sword’s GRC programs;
• Conducting periodic reviews and working with other teams to improve periodic review processes;
• Participating in risk assessments and risk assessment reviews;
• Participating in internal and external audits for current and future Compliance initiatives;
• Improving processes related to security questionnaires and client security assessments.

What you need to have:

• 3+ years of experience in Information Security certifications;
• Experience working with security-related certifications (PCI-DSS, SOC 2, HITRUST, ISO 27001, FedRamp);
• Strong analytical and problem-solving skills;
• Strong attention to detail;
• Excellent written and verbal communication skills;
• Basic knowledge of relevant laws and regulations;
• Ability to learn quickly and adapt to new information.

We'd Love to see:

• Understanding of Compliance management principles and concepts;
• Understanding of Risk management principles and concepts;
• Understanding of governance, risk, and compliance regulations and standards.