Cyber GRC Analyst II – Policy & Compliance

Invenergy LLC; Chicago (IL); On-site; USD 75,000 - 103,000; Full time

Benefits offered by this job

Bonus program

Medical, dental, and vision insurance

401k plan

Job summary

Invenergy LLC in Chicago is seeking an Analyst II, Information and Cyber Security to join a growing governance, risk, and compliance program. You will support security controls, policy governance, and regulatory compliance across the enterprise, working with Legal, IT, and security teams.

This role offers exposure to multiple cybersecurity domains, involvement in risk management and third-party assessments, and opportunities to contribute to incident response and audits within an enterprise

Qualifications

• Bachelor’s degree in Cybersecurity, IT, Information Systems, or equivalent.
• 2+ years of professional experience in cybersecurity, IT security, or GRC-related roles.
• Foundational knowledge of security frameworks (NIST SP 800-53, ISO 27001, CIS Controls).
• Experience supporting audits, compliance programs, or control assessments.
• Strong analytical and problem-solving skills with attention to detail.

Responsibilities

• Support the development, maintenance, and enforcement of security policies, standards, and procedures across the enterprise.
• Maintain and enhance the security controls catalog, aligning to CIS Controls, NERC CIP, NIST CSF, ISO 27001.
• Perform control assessments to evaluate design and operating effectiveness; identify gaps and track remediation efforts.
• Develop and maintain dashboards, metrics, and reporting to measure control performance and program maturity.
• Support NERC CIP compliance activities, including evidence collection, audit coordination, remediation tracking, and follow-up activities.

Skills

Cybersecurity knowledge

Audits & compliance support

Analytical thinking

Communication skills

Independent / cross-team collaboration

Education

Bachelor’s degree in Cybersecurity/IT/IS

Tools

ServiceNow

Archer

Smartsheet

Job description

Invenergy LLC in Chicago is seeking an Analyst II, Information and Cyber Security to join a growing governance, risk, and compliance program. You will support security controls, policy governance, and regulatory compliance across the enterprise, working with Legal, IT, and security teams.

This role offers exposure to multiple cybersecurity domains, involvement in risk management and third-party assessments, and opportunities to contribute to incident response and audits within an enterprise