Security GRC Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Conduct and enhance enterprise risk assessments utilizing frameworks such as NIST CSF, NIST 800-53, SOC 2, and CIS.

• Evaluate vulnerability assessment reports to aid in troubleshooting, remediation, and initiatives aimed at risk reduction.

• Create and implement security awareness programs, encompassing training sessions and phishing simulations.

• Provide actionable reporting and insights, including results from assessments and GRC metrics.

• Execute comprehensive cyber third-party risk assessments.

• Propel the optimization of processes and tools.

• Assist in governance and control management.

• Facilitate audit readiness and due diligence activities.

• Remain informed on changing regulations, frameworks, and industry trends.

• Oversee priorities and execution utilizing Agile methodologies.

⛳️ Requirements

• A Bachelor’s degree in Cybersecurity, Information Systems, or a related field, with 1–3 years of experience in GRC, risk management, or compliance within the cybersecurity sector.

• Familiarity with regulatory frameworks, audit processes, and control environments.

• Knowledge of third-party/vendor risk management (TPRM) processes and concepts related to enterprise risk.

• General understanding of security tools and controls across various domains, including network security and endpoint protection.

• Demonstrated capability to track, measure, and report on the effectiveness of the IS GRC program utilizing tools like ServiceNow, Archer, SharePoint, and Power BI.

• Experience in contributing to the continuous improvement of GRC programs.

• Background in developing and delivering training materials.

• Strong organizational, analytical, and multitasking skills.

🏝️ Benefits

• Comprehensive health, dental, and vision insurance.

• Mental health benefits.

• Employee assistance program.

• Paid time off.

• Paid parental leave.

• Short-term disability.

• Cultural observance day.

• Contributions to healthcare accounts.

• Pension plan.

• 401(k) plan with company matching.

• ProHealth Rewards.