Cyber Risk Controls & GRC Automation Analyst

Cybersecurity Jobs; Omaha (NE); Hybrid; USD 100,000 - 130,000; Full time

Job summary

Blue Cross and Blue Shield of Nebraska (BCBSNE) is seeking a cybersecurity professional in a hybrid role based in Omaha. The position focuses on validating and strengthening controls within a regulated tech environment, combining hands-on testing with GRC and continuous-control-monitoring to support audits and remediation.

You will translate complex findings into actionable risk insights, work with automated testing tools, and collaborate across cybersecurity, technology, risk, and business

Qualifications

• Bachelor's degree or equivalent in cybersecurity or related field.
• 3–5 years experience in cybersecurity assurance, security operations, cybersecurity engineering, IT audit, or related areas.
• Experience performing cybersecurity control testing and technical assessments.
• Working knowledge of NIST, CIS Controls, HITRUST, HIPAA, or ISO 27001.
• Ability to interpret technical evidence and translate findings into practical risk recommendations.

Responsibilities

• Shape how BCBSNE validates, measures, and strengthens cybersecurity controls.
• Conduct risk-based control assessments of design, implementation, and effectiveness.
• Translate testing results into practical risk insights and remediation priorities.
• Work with automated testing platforms to validate security posture.
• Identify misconfigurations across cloud, identity, endpoint, network, and data protection.
• Assess attack paths and recommend remediation actions.
• Support GRC and continuous-control-monitoring with dashboards and reporting.
• Partner with security, IT, risk, audit, and business teams on investigations.
• Support audits and regulatory reviews and validation activities.
• Convert findings into improvements to strengthen cyber resilience.

Skills

Cybersecurity fundamentals

Risk assessment

Security testing

GRC familiarity

Communication

Education

Bachelor’s degree in Cybersecurity/IT/CS or related field

Tools

MITRE ATT&CK

NIST

CIS Controls

ISO 27001

Job description

Blue Cross and Blue Shield of Nebraska (BCBSNE) is seeking a cybersecurity professional in a hybrid role based in Omaha. The position focuses on validating and strengthening controls within a regulated tech environment, combining hands-on testing with GRC and continuous-control-monitoring to support audits and remediation.

You will translate complex findings into actionable risk insights, work with automated testing tools, and collaborate across cybersecurity, technology, risk, and business