Cyber Risk Management Analyst (GRC)

INSPYR Solutions; Massachusetts; Remote; USD 90,000 - 130,000; Full time

Benefits offered by this job

Flexible remote work

Professional development

Employee wellbeing

Job summary

INSPYR Global Solutions is seeking a Cyber Risk Management Analyst (GRC) for a 12+ month contract. This role focuses on risk assessments, vulnerability management, evidence capture, and reporting outputs for risk decisions.

Remote work from the Philippines with collaboration across teams and leadership. You will document assessments in Excel, support migration to a new GRC platform, and maintain artifacts for audit readiness.

Qualifications

• Experience executing software assessments and vulnerability management.
• Ability to capture evidence and document findings with clear rationale.
• Strong documentation and stakeholder follow-up discipline.
• Experience maintaining risk scenarios and scenario-based statements.
• Experience coordinating inputs for downstream review and approvals.
• Familiarity with Excel-based risk tracking and reporting.

Responsibilities

• Execute software assessments and vulnerability management activities.
• Capture evidence, document findings, track remediation items, and record stakeholder comments.
• Produce assessment packages, status updates, and reporting outputs for leadership.

Skills

Risk assessment

Vulnerability management

Evidence collection

Stakeholder follow-up

Excel

Power BI

SharePoint

Outlook/Teams/Zoom

Education

Bachelor's degree or equivalent experience

Tools

ServiceNow

SharePoint

Excel

PowerPoint

Power BI

Outlook

Teams

Zoom

Job description

Cyber Risk Management Analyst (GRC)

Location: Remote Philippines

Duration: 12+ month contract

Compensation: Competitive, based on experience

Work Requirements: Citizen of the country of employment or authorized to work in that country.

Cyber Risk Management Analyst (GRC)

• Execute software assessments and vulnerability management activities using a structured, repeatable approach.
• Capture evidence, document findings, track remediation items, and record stakeholder comments.
• Produce complete assessment packages, status updates, and reporting outputs for manager review and final risk decisions.

Core Responsibilities

• Conduct risk assessments to identify potential threats and vulnerabilities across business applications and services.
• Support the development and maintenance of cyber risk scenarios and scenario-based risk statements with required comments and evidence.
• Coordinate working sessions with system owners, track follow-ups, and close documentation gaps.

Software assessments and vulnerability management support

• Perform software assessments for applications, platforms, and technology services to identify control gaps, security concerns, and required follow-up actions.
• Support vulnerability management processes by validating findings, tracking remediation progress, and ensuring assessment outputs are documented for downstream review and leadership visibility.

KRIs, emerging threats, and program reporting support

• Monitor and report Cyber Key Risk Indicators (KRIs) under guidance from senior team members.
• Provide inputs for leadership cadence and steering reporting.
• Stay informed on emerging threats and assist with updates to risk mitigation strategies and assessment content based on new risk signals and program direction.
• Document assessments initially in Excel spreadsheets and support migration to automation in the new GRC platform.
• Upload supporting artifacts to the team repository for audit readiness.
• Produce exports and status summaries for leadership cadence and steering meetings.
• Update manager weekly on progress, including closed assessments, open assessments, and roadblocks requiring escalation.

Role Boundaries

• Offshore/Nearshore resource drafts assessments, maintains trackers, and packages evidence.
• Onshore leadership owns final risk ratings, approvals, and risk acceptance decisions.

Responsibilities

• 3+ years executing software assessments and vulnerability management activities with strong documentation, evidence collection, and stakeholder follow-up discipline.
• Demonstrated ability to develop and maintain scenario-based cyber risk statements and capture consistent scoring inputs with clear rationale in a repeatable format.
• Experience performing software assessments and supporting vulnerability management processes, including documenting findings, tracking remediation items, and producing assessment packages for review.
• Experience identifying security gaps in applications, platforms, or systems and documenting key risks, mitigation actions, and remediation progress for leadership review.
• Experience analyzing legacy systems for security gaps and supporting remediation tracking to reduce technical debt.
• Strong Excel skills for assessment tracking and rollups, plus clear written status reporting for leadership cadence.
• Strong technical skills with standard business tools and systems, including Outlook, Teams, Zoom, video calls, meeting coordination, scheduling management, SharePoint, Excel, PowerPoint, and Power BI.
• Familiarity with software assessment practices, including use of structured questionnaires, evidence capture, and production of assessment report packages.
• Experience supporting software assessment and vulnerability management workflows, including coordinating required inputs for downstream review, remediation tracking, and approvals.
• Experience assessing applications, platforms, or systems for security gaps and documenting data handling, control concerns, and recommended mitigation actions for leadership review.
• Experience supporting risk scenario development and scenario-based risk statements for stakeholder-friendly assessments and reporting.
• Exposure to enterprise cyber risk assessment methods that incorporate stakeholder input and structured scoring approaches for likelihood, impact, and preparedness.
• Experience monitoring and reporting cyber program metrics and providing inputs for recurring leadership and steering cadences.
• Experience supporting technical debt risk reduction efforts, including analysis and remediation tracking for legacy and end-of-life systems.
• Familiarity with maintaining risk assessment artifacts and evidence in approved repositories to support audit readiness and repeatable reporting.

Technology Stack

• On Spring
• ITSM and CMDB: ServiceNow (policy exception tasks, CMDB-sourced scoping inputs)
• Collaboration and reporting: SharePoint, Excel, PowerPoint, Power BI
• Core technical operations: Outlook, Teams, Zoom, video calls, meeting coordination, and scheduling management
• Bachelor's degree or equivalent experience.
• Preferred certifications include CRISC, CISA, CISSP, or similar risk and audit focused credentials.

Why Join INSPYR Global Solutions (IGS)

Become part of a diverse and multicultural workplace where you'll collaborate with talented professionals from around the world, build meaningful connections, and grow your career in a supportive environment. At IGS, we're committed to helping you succeed by offering:

• Flexible remote and hybrid work opportunities
• Continuous learning and professional development programs
• A culture that prioritizes employee wellbeing

INSPYR Global Solutions

is the global delivery team for INSPYR Solutions, connecting top talent with opportunities across IT and professional services. Through collaboration, expertise, and innovation, we support global teams and help drive impactful solutions for our clients. Our focus is building a community of skilled, motivated, and reliable professionals who contribute to growth, performance, and long-term success. Learn more about us at www.inspyrglobalsolutions.com

INSPYR Solutions provides Equal Employment Opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, genetics, or any other protected status. INSPYR Solutions complies with all applicable laws governing nondiscrimination in employment in every location in which the company has facilities.

Applicants requiring reasonable accommodation during the application or interview process should contact [e-mail] for assistance.

Information collected and processed through your application with INSPYR Solutions (including any job applications you choose to submit) is subject to INSPYR Solutions' Privacy Policy and INSPYR Solutions' AI and Automated Employment Decision Tool Policy: https://www.inspyrsolutions.com/policies/. By submitting an application, you are consenting to being contacted by INSPYR Solutions through phone, email, or text.

26-159928