Senior / Lead Cybersecurity GRC Analyst

Description

• Risk Management: Identify, assess, and monitor cybersecurity risks within the organization, ensuring effective mitigation strategies are in place and risks are documented.
• Incident Response: Participate in incident response planning and provide support during investigations related to security breaches or compliance violations.
• Security Controls: Evaluate existing security controls, policies, and procedures to identify gaps and recommend improvements.
• Training & Awareness: Support the development and delivery of security awareness and training programs for staff and stakeholders to foster a strong security culture.
• Governance: Support the development and implementation of security governance frameworks and policies to ensure alignment with organizational goals and regulatory requirements.
• Vendor Risk Management: Assess third-party security risks and collaborate with other teams to evaluate vendor security posture.
• Reporting and Documentation: Prepare detailed risk assessments, compliance reports, and audit findings for senior management and other stakeholders.
• Compliance: Assist in ensuring compliance with relevant laws, regulations (such as NERC, SOX, HIPAA, CMMC), and industry standards (ISO 27001, NIST, etc.). Conduct periodic audits and prepare compliance reports. Coordinate internal and external audits, including communication, walkthroughs, control testing and evidence gathering.

Requirements

• Hands-on GRC experience and a demonstrated ability to align risk management strategies with overarching business objectives.
• Proven ability to evaluate complex security risks and communicate findings effectively to non-technical stakeholders.
• Strong understanding of cybersecurity frameworks and standards (e.g., NIST, ISO 27001, COBIT, SOC 2, etc.).
• 7+ years of cybersecurity-related experience.
• Knowledge of compliance regulations (NERC, NRC, HIPAA, etc.) and risk management practices.
• Relevant certifications such as CISSP, CISA, CRISC, or CISM are highly preferred.
• Experience with cloud security, IT governance, and data privacy.
• Bachelor’s degree in Cybersecurity, Information Technology, Risk Management, or a related field (or equivalent work experience).
• Familiarity with security tools, risk management platforms, and compliance monitoring systems (SailPoint, ServiceNowGRC, AuditBoard, Abnormal AI, Proofpoint Security Awareness etc.)
• Ability to work effectively with cross-functional teams, including IT, legal and business unit leaders.
• Excellent written and verbal communication skills are crucial for translating complex technical and regulatory issues to both technical and non-technical audiences.
• Knowledge of threat intelligence and vulnerability management.
• Ability to work in a collaborative, fast-paced environment with cross-functional teams.
• Strong analytical, organizational, and problem-solving skills.

Benefits

Training + Development

Interview process

Visa Sponsorship

Security clearance