Cyber GRC Assurance & Automation Analyst

Blue Cross Blue Shield of Nebraska; United States; Hybrid; USD 95,000 - 135,000; Full time

Job summary

Blue Cross and Blue Shield of Nebraska is seeking a cyber/GRC analyst to validate security controls across a modern technology environment. You will perform risk-based assessments, validate control effectiveness, and support continuous-control-monitoring and reporting to leadership.

The ideal candidate brings experience with NIST/CIS/HITRUST/HIPAA/ISO 27001, strong analytical skills, and the ability to translate technical findings into actionable risk insights for stakeholders.

Qualifications

• Bachelor's degree in Cybersecurity, IT, CS, Risk Management, or related field.
• 3–5 years of experience in cybersecurity assurance, security operations, cybersecurity engineering, penetration testing, IT audit, GRC, risk management, or related experience.
• Experience performing cybersecurity control testing, technical assessments, configuration reviews, vulnerability validation, or security assessments.
• Working knowledge of cybersecurity frameworks such as NIST, CIS Controls, HITRUST, HIPAA, or ISO 27001.
• Experience interpreting technical evidence and translating cybersecurity findings into practical risk and remediation recommendations.

Responsibilities

• Conduct risk-based control assessments to validate design, implementation and effectiveness of security controls.
• Validate security posture and identify misconfigurations to recommend remediation.
• Support GRC and continuous-control-monitoring capabilities with automated evidence collection and dashboards.
• Collaborate with cyber, technology, risk, audit, and business teams to drive improvements.

Skills

Cybersecurity assurance

Security operations

Penetration testing

Risk management

GRC processes

Education

Bachelor's degree in Cybersecurity

Tools

GRC platforms

Attack-path analysis tools

Job description

Blue Cross and Blue Shield of Nebraska is seeking a cyber/GRC analyst to validate security controls across a modern technology environment. You will perform risk-based assessments, validate control effectiveness, and support continuous-control-monitoring and reporting to leadership.

The ideal candidate brings experience with NIST/CIS/HITRUST/HIPAA/ISO 27001, strong analytical skills, and the ability to translate technical findings into actionable risk insights for stakeholders.