Note: The job is a remote job and is open to candidates in USA. Agero provides digital driver assistance services through data-driven technology and a broad service-provider network. The Cybersecurity Governance Analyst develops and maintains enterprise cybersecurity policies and standards, conducts vendor risk assessments, supports audits and client security reviews, and drives security awareness and risk remediation across the organization.
Responsibilities
- Assist in identifying, developing, and maintaining enterprise cybersecurity policies and standards, aligning processes with established frameworks such as ISO 27001, PCI-DSS, and SOC 2
- Perform vendor security and privacy risk assessments, evaluate control environments, monitor findings, and track ongoing vendor remediation efforts
- Respond to client security questionnaires, coordinate evidence collection, and support customer trust reviews and external audits
- Provide guidance on core security controls—including access management, data encryption, logging, and business continuity—while investigating deficiencies to recommend and track corrective actions
- Act as a liaison between business units and IT/Engineering teams to support data security implementations and drive enterprise-wide security awareness programs
- Partner with IT and Engineering leaders to create and refine the enterprise security architecture while supporting security control assessment strategies
Skills
- 3-5 years in information security compliance with hands-on experience to industry compliance frameworks such as PCI-DSS, SOC 2, or ISO 27001. Experience maintaining compliance documentation, ability to map controls to technical implementations and evaluate evidence quality
- Demonstrates the ability to identify, evaluate, and mitigate security risks across application, network, endpoint, and cloud environments—including DevSecOps practices and emerging technologies like AI—while ensuring strict alignment with enterprise security policies
- Possesses a comprehensive understanding of industry-standard control frameworks (e.g., ISO 27001, PCI-DSS, SOC 2) to evaluate controls, manage evidence collection, and maintain enterprise-wide compliance
- Skilled at building productive relationships across all organizational levels, including IT management, technical staff, external vendors, and consultants, to drive security awareness and risk remediation
- Demonstrates strong written and oral communication skills; adept at authoring technical documentation, delivering security presentations, and accurately completing complex client security questionnaires
- Rapidly learns and applies advanced technical security concepts, adapting governance strategies seamlessly within a fast-paced, constantly evolving cybersecurity environment
- Applies strong analytical skills and sound independent judgment to evaluate complex risk scenarios, pay close attention to detail, and execute effective decision-making
- United States: Arizona, California, Florida, Georgia, Illinois, Massachusetts, Michigan, New Hampshire, New York State, New Mexico, North Carolina, Tennessee, Virginia
- Applicants must be currently authorized to work in the United States on a full‑time basis. This position is not eligible for employer visa sponsorship now or in the future
Benefits
- Healthcare, dental, vision, disability, life insurance, and mental health benefits for associates and their families.
- 401(k) plan with company match
- Tuition assistance to support your future goals.
- Flexible time off
- Paid sick leave
- Ten paid holidays annually.
- For Contact Center Roles: Accrual of up to 3 weeks Paid Time Off per year, paid sick leave, and ten paid holidays annually.
- Parental planning benefits to assist associates through life’s milestones.
- Bonus/Incentive Programs
- For technical positions, initial onboarding travel to Medford is handled by the company, including all travel arrangements and expenses.
Company Overview