GRC Technical Analyst (Unpaid Volunteer Position)

Location: Remote

Reports to: GRC Tech Head

Time commitment: minimum 20 hours weekly

Headcount: 2 person

About the Organization:

Menzies Philanthropic Foundation (Menzies Mission) is a non-profit dedicated to supporting orphans and vulnerable families through resources, education, and holistic development rooted in the Menzies 8 Keys of Needs: Housing, Health, Nutrition, Education, Family, Community, Faith, and Love. We believe that self-actualization is a powerful pathway to breaking cycles of poverty and trauma. Through mental and emotional support, healing-centered guidance, and community-rooted programs, we strengthen connection and belonging, empowering individuals to realize their potential and transform their future.

In partnership with our social-impact company, Me Is We, we are developing a regenerative financial ecosystem to support the long-term sustainability and expansion of our mission. At the heart of this ecosystem is My Source Network, a global holistic wellness community platform devoted to healing and mindful connection. Through practitioners, conscious events, and transformational resources, My Source Network supports individuals on their journeys toward balance, empowerment, and belonging while cultivating a worldwide community rooted in healing, authenticity, and collaboration.

We are an impact-driven organization rooted in integrity, accountability, collaboration, and service. Our work is guided by a commitment to collective healing and empowering the communities we serve, knowing that meaningful, lasting change is created together. If you feel called to bring your skills, presence, and purpose into our mission, we would be honored to welcome you into the Menzies Mission community.

Job Overview:

We are seeking a highly motivated and detail-oriented GRC Technical Analyst with a strong background in technical incident response. The ideal candidate will help build and mature our security programs, focusing specifically on our wellness platform technology infrastructure, while also playing a key role in responding to and mitigating technical security incidents.

Key Responsibilities:

• Perform security risk assessments, including third-party and vendor risk management, to identify vulnerabilities and mitigate threats related to events, data handling, and technology infrastructure.
• Conduct risk modeling and incident response exercises specific to live events, such as mitigating risks from public Wi-Fi, phishing during registration, and protecting sensitive users and clients data.
• Serve as an escalation point for the Security team, leading the end-to-end incident response process from detection and analysis to containment, eradication, and recovery.
• Assist technical security requirements into effective, actionable security policies, standards, and procedures.
• Develop and report on key security metrics, including those related to incident response performance (e.g., detection time, resolution time), for management and governance committees.

Skills and Qualifications:

• A bachelor's degree in a technical field like Computer Science, Cybersecurity, or Information Technology is typically required.
• Have a strong foundational knowledge of IT and cybersecurity principles, including security controls, networking concepts, and operating systems.
• Skills in digital and network forensics for investigating data breaches and analyzing malware.
• In-depth knowledge of major security frameworks (NIST, ISO) is critical.

Preferred Experience:

• 1 to 3 years of experience (or equivalent academic/lab/project work) in security, risk, or incident response
• Hands-on exposure to security tools (SIEM, vulnerability scanners) and OWASP Top 10
• Familiarity with NIST and ISO 27001 frameworks
• Certifications such as CompTIA Security+, ISC2 CC, or GIAC are a plus
• Experience documenting incidents or security findings clearly

Application Process:

To apply, review the job description and submit your resume, portfolio, and cover letter to hr@menziesmission.org. Please ensure that your contact information is accurate for any status updates regarding your application. If selected, you will be contacted to discuss your qualifications and how they align with the organization's mission.

For any questions, feel free to reach out to hr@menziesmission.org. We look forward to reviewing your application.

Equal Opportunity Employer:

Menzies Philanthropic Foundation is committed to diversity, inclusion, and equal opportunity. We welcome applicants from all backgrounds and do not discriminate based on race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, veteran status, or any other characteristic protected by law. Accommodation for the application process is available upon request.