Senior Cyber GRC Analyst

This is a fully remote position, open to applicants in Texas.

📋 Description

• Conduct risk assessments utilizing the NIST Risk Management Framework and standards-based guidelines.

• Execute threat modeling and evaluations.

• Examine vulnerability data obtained from scanning tools, cyber intelligence, and various other resources.

• Organize both internal and external audit processes, including SOC II Type 2 audits.

• Design and oversee the implementation of cybersecurity controls in accordance with NIST SP800-53 r4.

• Facilitate the creation of system security plans and ensure adherence to standards and policies.

• Evaluate supplier systems and technologies while coordinating risk management and response efforts.

• Maintain Plans of Action and Milestones (POAMs) and oversee the completion of designated tasks and activities.

• Conduct baseline assessments of cybersecurity compliance.

• Assist in ensuring systems are updated according to approved schedules and requirements.

• Evaluate new risks and suggest appropriate actions.

• Coordinate annual cybersecurity evaluations across vendors and service providers, producing consolidated reports.

• Deliver reports, communications, and engagement with stakeholders and management.

• Provide senior management and executive briefings, summaries, and reports regarding the cybersecurity posture.

• Coordinate activities related to business continuity and disaster recovery.

• Lead the upkeep of policies, procedures, and associated job aid documentation.

• Report to the Technical Director as part of a team responsible for security planning, management, and oversight for data center and cloud services.

⛳️ Requirements

• Bachelor’s Degree in a related field and a minimum of five (5) years of relevant experience; OR a Master’s Degree with at least three (3) years of experience in a related field (e.g., Information Security).

• 3-5 years of experience in cyber risk management, including familiarity with the NIST RMF and SP800-53R4.

• 3-5 years of experience in cyber vulnerability and/or risk management.

• 3-5 years of experience in conducting and coordinating cybersecurity assessments and audits.

• Cybersecurity certification preferred (CISSP or CRISC; alternatives include CompTIA Security+, CEH, CISA, CISM, GSLC).

• Experience in developing and documenting cybersecurity policies and standards.

• Cybersecurity experience in data center and cloud environments.

• Ability to create reports and visualizations to support Risk & Compliance initiatives.

• Strong oral and written communication skills.

• Preferred: Experience with Vulnerability Management & Compliance scanning tools such as Tenable or Qualys.

• Preferred: Experience with ITIL or ITIL certification.

• Preferred: Experience with ITSM/Reporting tools such as ServiceNow.

• Program work must be conducted within the United States.

🏝️ Benefits

• Competitive salary and performance-based bonuses.

• Comprehensive health, dental, and vision insurance.

• Retirement savings plan with company matching.

• Opportunities for professional development and certifications.

• Flexible work arrangements and a supportive work environment.