Governance Analyst

About the role

Qualfon is seeking a Governance Analyst to support and coordinate Governance, Risk, and Compliance (GRC) activities across the organization. You will ensure alignment with internal policies, regulatory requirements, contractual obligations, and information security standards while partnering with regional and global stakeholders.

Key responsibilities

• Coordinate and support internal, external, client, and regulatory audits, including preparation, evidence collection, and follow‑up.
• Identify, assess, and manage risks, track audit findings, and drive corrective action plans to closure.
• Perform risk assessments, compliance assessments, control reviews, and security gap analyses.
• Maintain and validate information security policies, procedures, and controls against frameworks such as ISO/IEC 27001, SOC 2, NIST, PCI DSS, and HIPAA.
• Support vendor and third‑party security and compliance reviews.

Required profile

• Bachelor’s degree in Information Security, Cybersecurity, IT, Business Administration, Risk Management, or related field (or equivalent experience).
• 2–4 years of experience in GRC, information security, IT audit, or risk management.
• Experience preparing for and supporting audits, tracking remediation activities, and conducting compliance assessments.
• Familiarity with security frameworks and regulatory requirements.

Required skills

• CompTIA Security+
• CISA, CRISC, CISM, CISSP (certifications preferred)
• ISO/IEC 27001
• PCI DSS
• SOC 2
• HIPAA
• NIST framework

What we offer

• Competitive wages and incentive programs
• Free access to personal and professional support via the Qualfon coach program
• Opportunity to earn a college degree through Qualfon University
• Fun, collaborative work environment