Security GRC Analyst
New
P
ProtectiveInformation Technology
Work From HomeFull-TimeMiddle
Salary70,000 - 77,000 USD per year
Apply NowOpens the employer's application page
Job Details
- Experience
- 1–3 years of experience in GRC, risk management, or compliance within cybersecurity.
- Required Skills
- Microsoft Power BISharePointComplianceRisk ManagementServiceNow
Requirements
- Bachelor’s degree in Cybersecurity, Information Systems, or related field.
- 1–3 years of experience in GRC, risk management, or compliance within cybersecurity.
- Working knowledge of regulatory frameworks (NIST CSF, NIST 800-53, SOC 2, CIS) and audit processes.
- Understanding of third-party/vendor risk management (TPRM) and enterprise risk concepts.
- General knowledge of security tools across network, endpoint, email, and vulnerability management.
- Foundational understanding of cloud service models (IaaS, SaaS, PaaS).
- Proven ability to track and report GRC program effectiveness using tools such as ServiceNow, Archer, SharePoint, or Power BI.
- Experience contributing to continuous improvement of GRC programs.
- Experience developing and delivering training materials with strong communication skills.
- Strong organizational, analytical, and multitasking abilities.
Responsibilities
- Perform and mature enterprise risk assessments using frameworks such as NIST CSF, NIST 800-53, SOC 2, and CIS.
- Analyze vulnerability assessment reports to support troubleshooting and risk reduction.
- Develop and execute security awareness programs including training, phishing simulations, and newsletters.
- Deliver actionable reporting, metrics, dashboards, and executive-level presentations on risk posture.
- Perform end-to-end cyber third-party risk assessments, including vendor onboarding and offboarding.
- Drive GRC process and tooling optimization to improve operational consistency.
- Manage policy, standards, and control libraries aligned to regulatory requirements.
- Enable audit readiness by managing evidence collection and maintaining repositories for inquiries.
- Manage priorities and execution using Agile methodologies.
View Full Description & ApplyYou'll be redirected to the employer's site
