Senior Cyber GRC Analyst

This is a fully remote position, open to applicants in Texas.

📋 Description

• Conduct risk analyses utilizing the NIST Risk Management Framework, which involves identifying risks, suggesting mitigations, and monitoring risks throughout their lifecycle.

• Execute threat modeling and assessments.

• Evaluate and analyze vulnerability data from scanning tools, cyber intelligence, or other resources to assess validity, severity, and impact on customers.

• Facilitate internal and external audit processes, including SOC II Type 2 audits.

• Design and oversee the implementation of cybersecurity controls in collaboration with technical teams, referencing NIST SP800-53R4 and other guidelines.

• Manage and supervise the development of system security plans, ensuring compliance with standards and policies.

• Evaluate risk for peer supplier systems and technologies, and coordinate risk management and response initiatives.

• Maintain Plans of Action and Milestones (POAMs) and oversee the completion of assigned tasks and activities by team members.

• Perform baseline assessments of cybersecurity compliance against established standards and requirements.

• Ensure that SAIC and applicable systems are patched according to approved schedules and requirements.

• Provide insights and evaluations of new risks, along with recommended actions.

• Coordinate annual cybersecurity assessments across various vendors and service providers, producing consolidated assessment reports.

• Deliver reports, maintain communication, and engage with stakeholders and management.

• Present senior management and executive briefings, summaries, and reports on activities, assessments, and the overall cybersecurity posture.

• Coordinate business continuity and disaster recovery efforts.

• Lead the upkeep of policies, procedures, and associated job aid documentation.

⛳️ Requirements

• Bachelor’s Degree in a related field with five (5) years of relevant experience; OR, a Master’s Degree and three (3) years of experience in a related discipline (e.g., Information Security).

• U.S. Citizenship is mandatory, along with the ability to pass a background check including fingerprinting.

• 3-5 years of experience in cyber risk management, encompassing the NIST RMF and SP800-53R4.

• 3-5 years of experience in cyber vulnerability and/or risk management.

• 3-5 years of experience in providing and coordinating cybersecurity assessments and audits.

• Cybersecurity certification (CISSP or CRISC preferred; alternatives include CompTIA Security+, CEH, CISA, CISM, GSLC).

• Experience in developing and documenting cybersecurity policies and standards.

• Knowledge of cybersecurity in data center and cloud environments.

• Ability to create reports and visualizations to support Risk & Compliance activities.

• Exceptional oral and written communication skills.

• Familiarity with Vulnerability Management & Compliance scanning tools such as Tenable or Qualys (preferred).

• Experience with ITIL or an ITIL certification (preferred).

• Proficiency with ITSM/Reporting tools like ServiceNow (preferred).

🏝️ Benefits

• Comprehensive healthcare coverage including medical, dental, and vision.

• Competitive salary with performance-based bonuses.

• Flexible work hours and remote work options.

• Generous vacation and paid time off policies.

• Opportunities for professional development and certification reimbursement.