Information Security Assurance Analyst I

Global Payments Inc.

. Provide technical guidance on information security policies, procedures, technologies, and compliance-related activities through First Line Assurance assessments .

Posted 10/16/2026full-timeAtlanta • Ohio • United StatesSeniorLeadWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in information security policies, compliance frameworks, and risk management, with a strong focus on automation of security control validation and assurance processes. Proven ability to collaborate with stakeholders to identify risks and provide actionable remediation recommendations.

Highest-signal resume keywords

Information Security AssessmentCompliance AutomationSecurity Control ValidationStakeholder ManagementAutomation Tools

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Information SecuritySecurity AssuranceRisk ManagementControl TestingCompliance FrameworksSecurity ArchitectureSecurity EngineeringData AnalysisEvidence CollectionContinuous Monitoring

Soft Skills

Analytical SkillsCommunication SkillsCollaborationProblem-SolvingStakeholder Engagement

Tools & Technologies

Microsoft Power AppsPower AutomatePower BIServiceNowOptroArcherAuditBoard

Certifications & Qualifications

CRISCCGRCCISMCISSPCISACySA+

Industry Keywords

PCIFFIECFISMASOXGLBAHIPAAISO-87001NIST 800-53NIST CSFNIST RMF

Tech Stack

Tools & technologies

AWSAzureCloudGoogle Cloud PlatformServiceNow

About the role

Key responsibilities & impact

Provide technical guidance on information security policies, procedures, technologies, and compliance-related activities through First Line Assurance assessments
Collaborate with Information Security, Technology, Risk, Audit, and business stakeholders to support First Line Assurance objectives
Perform targeted control assessments, operational assurance reviews, post-deployment security validations, and certification activities
Evaluate security control implementation and effectiveness; identify control weaknesses and compliance gaps
Assist with remediation tracking and provide detailed findings and recommendations to stakeholders
Support automation of control audits, evidence collection, control testing, reporting, remediation tracking, certification, and continuous monitoring
Contribute to workflows, dashboards, data collection, and repeatable assessment processes that reduce manual effort and increase assurance coverage
Use automation and reporting tools to streamline evidence collection, control validation, assessment execution, remediation tracking, and recurring assurance activities
Support continuous monitoring, assurance, and validation activities by reviewing technical, administrative, and operational security controls
Analyze assessment results, assist in developing automation opportunities, track remediation efforts, and contribute to recurring certification and reporting activities
Review business requests, assurance findings, and control exceptions to determine risk level and appropriate remediation path
Inform management of security policy variances and control gaps
Create formal networks with key decision makers and serve as a trusted partner to Information Security, Technology, Risk, Audit, and business stakeholders
Exercise wide latitude in determining objectives and approaches to critical assignments
Perform other duties as assigned

Requirements

What you’ll need

Bachelor's and/or Master’s Degree in Computer Science, Information Security, or related information technology field, and/or a combination of equivalent and relevant work experience
Minimum 7+ years relevant experience in information security, security assurance, audit, risk, compliance, security architecture, security engineering, or related technology functions
Knowledge of industry standard security and compliance programs and frameworks including PCI, FFIEC, FISMA, SOX, GLBA, HIPAA, ISO-87001, NIST 800-53, NIST CSF, NIST RMF, and/or related security control frameworks
Ability to work with stakeholders at multiple levels to identify risk, collect and evaluate evidence, document findings, and communicate practical remediation options
Professional certifications such as CRISC, CGRC, CISM, CISSP, CISA, CySA+, or equivalent experience are preferred
Strong familiarity with on-prem, cloud, and hybrid environments across connected and disconnected environments in a complex and diverse Fortune 500 company
Familiarity with multiple cloud hosting environments, or strong familiarity with GCP, AWS, or Azure
Experience performing information security assessments, security control assessments, technical control testing, control design testing, control effectiveness testing, KPI/KRI testing and validation, operational assurance reviews, or post-deployment validation activities
Experience designing, implementing, or supporting automated security control validation processes, tooling, and infrastructure, including strategic and continuous monitoring, audit resiliency, and/or evidence collection processes is highly desirable
Experience with Microsoft Power Apps Platform, including Power Automate and Power BI, or other metric and reporting data structures is desirable
Experience developing dashboards, metrics, assessment reports, or recurring assurance reporting from multiple data sources
Familiarity with workflow automation platforms such as ServiceNow and assessment or evidence tracking platforms such as Optro (fka AuditBoard), Archer, or similar audit/GRC tools
Knowledge of continuous monitoring, control validation, compliance automation, evidence collection, and remediation tracking concepts
Strong analytical, communication, and stakeholder management skills, with the ability to translate technical evidence into business-focused recommendations
If working in the United States, must undergo a drug test after a conditional offer

Benefits

Comp & perks

Equal opportunity employer
Reasonable accommodations during the hiring process and to perform essential job functions
Conditional-offer drug testing for employees working in the United States