Cyber GRC Automation & Controls Analyst

Blue Cross and Blue Shield of Nebraska; Omaha (NE); Hybrid; USD 90,000 - 130,000; Full time

Job summary

Blue Cross and Blue Shield of Nebraska is seeking a cybersecurity professional to shape and validate controls within a regulated technology environment. You will perform risk-based assessments across cloud, network, and application layers, linking technical testing to practical risk insights.

You will collaborate with cybersecurity, risk, audit, and business teams to investigate issues, support audits, and drive remediation through automated evidence collection and testing activities.

Qualifications

• Bachelor's degree or equivalent experience in cybersecurity-related field.
• 3–5 years in cybersecurity assurance, security operations, or IT risk.
• Experience with cybersecurity control testing and vulnerability validation.
• Knowledge of NIST, CIS, HITRUST, HIPAA, or ISO 27001.
• Ability to translate technical findings into remediation recommendations.

Responsibilities

• Perform risk-based control assessments and validate controls.
• Collaborate with cybersecurity, risk, audit, and business teams.
• Support audits and regulatory reviews and approved validation activities.
• Develop and monitor reporting dashboards and metrics.
• Assist in evidence collection and remediation tracking.

Skills

Cybersecurity

Security operations

Penetration testing

Risk management

GRC

Regulatory compliance

Communication

Education

Bachelor's degree

Relevant experience

Tools

GRC platforms

Automation tools

Cloud security tools

Job description

Blue Cross and Blue Shield of Nebraska is seeking a cybersecurity professional to shape and validate controls within a regulated technology environment. You will perform risk-based assessments across cloud, network, and application layers, linking technical testing to practical risk insights.

You will collaborate with cybersecurity, risk, audit, and business teams to investigate issues, support audits, and drive remediation through automated evidence collection and testing activities.