Cyber Analyst

Goosehead Insurance Agency LLC; Westlake (TX); On-site; USD 90,000 - 140,000; Full time

Job summary

Goosehead Insurance Agency LLC is seeking a Cybersecurity Analyst to protect data, systems, and infrastructure. You will assess security controls, manage vendor risk, and ensure regulatory compliance across the organization.

Responsibilities include monitoring alerts, investigations, risk assessments, policy development, and support for audits and GRC initiatives. Collaboration with IT, legal, HR, and audit is essential.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, or related field.
• 2–5+ years of experience in cybersecurity or IT security; GRC/compliance experience a plus.
• Certifications such as Security+, CySA+, CEH, GIAC, CISA, CRISC, or CISSP preferred.
• Proficiency with security tools (SIEM, vulnerability scanners, endpoint protection) and knowledge of NIST/MITRE ATT&CK.

Responsibilities

• Monitor and analyze security alerts from SIEM, EDR, firewalls, and network traffic.
• Investigate security incidents, determine root causes, and recommend remediation steps.
• Conduct vulnerability assessments and support pen testing; perform risk evaluations.
• Develop and maintain cybersecurity policies, standards, and procedures aligned to frameworks (NIST, ISO 27001, CIS).
• Support GRC activities: risk assessments, risk register, gap analyses, mitigation tracking.
• Assist audits, evidence collection, vendor risk assessments, and remediation of findings.
• Monitor compliance metrics, regulatory changes, and risk trends; report to management and audits.
• Develop and implement security controls to protect networks, systems, and data.
• Respond to and mitigate cybersecurity incidents: containment, eradication, recovery.
• Collaborate with IT, legal, HR, and audit on security projects and training.
• Stay current on threats, regulations, and best practices.

Skills

Problem solving

Analytical thinking

Communication

Documentation

Education

Bachelor's degree in Cybersecurity/CS/related

Tools

SIEM

Vulnerability scanners

Endpoint protection

Job description

About Goosehead

Since 2003, Goosehead Insurance has been disrupting the insurance industry by giving clients the power of choice, utilizing a smarter marketing approach, and delivering world-class service. This is all powered by our focus on hiring and retaining extraordinary people. Our clients trust us with their most valuable possessions, so we’re more than just a bit selective when it comes to hiring new team members.

Job Summary

We are seeking a Cybersecurity Analyst who’s experience will be pivotal in protecting the company’s data, systems, and infrastructure. The analyst will be responsible for assessing security controls, managing vendor risk, and collaborating with internal teams to ensure compliance with regulatory requirements.

Key Responsibilities

• Monitor and analyze security alerts from various tools (e.g., SIEM, EDR, firewalls, network traffic) to detect intrusions, malware, or anomalous activity.
• Perform in-depth investigations of security incidents, determine root causes, and recommend remediation steps.
• Conduct vulnerability assessments, penetration testing support, and risk evaluations to identify and prioritize threats.
• Develop, review, and maintain cybersecurity policies, standards, and procedures in alignment with industry frameworks (e.g., NIST, ISO 27001, CIS Controls) and regulatory requirements.
• Support Governance, Risk, and Compliance (GRC) activities, including conducting risk assessments, maintaining the risk register, performing gap analyses against compliance standards (e.g., SOC 2, PCI DSS, HIPAA, GDPR, CCPA), and tracking mitigation plans.
• Assist with internal and external compliance audits, evidence collection, vendor risk assessments, and remediation of identified findings to ensure ongoing adherence to regulations and organizational policies.
• Monitor and report on compliance metrics, regulatory changes, and risk trends; prepare detailed reports on security events, GRC status, and metrics for management and audit purposes.
• Develop and implement security controls, policies, and procedures to protect networks, systems, and data.
• Respond to and mitigate cybersecurity incidents, including containment, eradication, and recovery efforts.
• Collaborate with cross-functional teams (IT, legal, HR, audit) on security projects, awareness training, threat intelligence, and GRC initiatives.
• Stay current on evolving cyber threats, tools, regulatory landscapes, and best practices; contribute to continuous improvement of the security and compliance posture.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, or related field.
• 2–5+ years of experience in cybersecurity, IT security, or related roles (experience with GRC/compliance activities is a plus).
• Certifications such as CompTIA Security+, CySA+, CEH, GIAC, CISA, CRISC, or CISSP highly preferred.
• Proficiency with security tools (SIEM, vulnerability scanners, endpoint protection) and understanding of frameworks like NIST, MITRE ATT&CK, and common GRC standards.
• Strong problem-solving, analytical, communication, and documentation skills.

Since 2003, Goosehead has been changing the face of the insurance industry and making the search for great coverage a piece of cake. We’re committed to finding the best policies and rates, and that starts with our team. Our people are smart, inclusive, hungry for success, and strive everyday to win. There is noble purpose in all our efforts. The work we do matters. Not only are we fixing a broken industry, we get to win professionally and financially while doing it.

If you think you have what it takes to grow with our company, we would love to meet you.