Cyber Security Analyst

Insight Global; San Antonio (TX); On-site; USD 95,000 - 125,000; Full time

Job summary

Insight Global is seeking a Cyber Security Analyst to sit on site in San Antonio, Texas, leading enterprise governance, risk, and compliance (GRC) initiatives to ensure regulatory alignment and risk-informed decision-making.

You will develop and enforce policies, manage control frameworks, conduct enterprise risk assessments across on‑prem, cloud, and third‑party environments, and coordinate audit readiness with regulators and assessors.

Qualifications

• Bachelor's degree in cybersecurity, information assurance, or related.
• 4-5 years in cybersecurity, risk management, or compliance.
• Knowledge of NIST SP 800-53, HIPAA, PCI-DSS.
• Experience developing security policies, standards, and controls.
• Ability to conduct enterprise cyber risk assessments across on‑prem, cloud, and third‑party environments.
• Experience supporting audits and regulator/third‑party assessments.
• Translate regulatory requirements into actionable controls.
• Experience managing risk registers, risk acceptance, and exceptions.

Responsibilities

• Lead enterprise governance, risk, and compliance (GRC) initiatives to align with regulations.
• Develop, maintain, and enforce enterprise cybersecurity policies, standards, and procedures.
• Establish control frameworks, control matrices, and compliance mappings.
• Conduct enterprise cyber risk assessments across business systems, cloud, and third‑party vendors.
• Maintain the enterprise risk register and provide risk-based recommendations to leadership.
• Serve as liaison for audits, regulators, and assessors; drive audit readiness.
• Oversee security controls across IT, cloud, and business systems; monitor control performance.
• Partner with engineering, SOC, and IT teams to operationalize security controls.
• Conduct vendor risk assessments and ensure third‑party compliance with contracts and regulations.
• Lead security awareness and training; drive continuous GRC program improvement.
• Mentor junior analysts and provide guidance to leadership.

Skills

GRC governance

Risk management

Compliance frameworks

Regulatory audits

Enterprise policies

Vendor risk assessments

Executive communications

Regulatory reporting

Risk registers

Cross‑functional collaboration

Education

Bachelor's degree in cybersecurity/information assurance

Job description

(This is a server/cyber security role with an emphasis on governance. It is a contract role for 2 years with high likelihood of extension)

Required Skills & Experience

• Bachelor's degree in cybersecurity, information assurance, or related
• 4-5 years of experience within cybersecurity, risk management, or compliance
• Proven knowledge of cybersecurity and compliance frameworks such as NIST SP 800-53, HIPAA, and PCI-DSS
• Experience developing and maintaining enterprise security policies, standards, and control frameworks
• Proven ability to conduct enterprise cyber risk assessments across on‑prem, cloud, and third‑party environments
• Demonstrated experience supporting or leading internal and external audits, including regulator and third‑party assessments
• Ability to translate regulatory and compliance requirements into actionable technical and operational controls
• Experience managing risk registers, risk acceptance, and exception processes
• Strong communication skills with the ability to present risk and compliance findings to executive leadership

Job Description

Insight Global is seeking a Cyber Security Analyst to sit on site in San Antonio, Texas. You will be responsible for leading enterprise governance, risk, and compliance (GRC) initiatives to ensure regulatory alignment, enables risk‑informed decision‑making, and integrates security controls across business and technology operations. This position serves as a key advisor and liaison among cybersecurity, legal, audit, and executive leadership.

• Develop, maintain, and enforce enterprise cybersecurity policies, standards, and procedures
• Establish and manage control frameworks, control matrices, and compliance mappings
• Lead enterprise‑wide cyber risk assessments, including business systems, cloud environments, and third‑party vendors
• Identify, analyze, prioritize, and document risks using qualitative and quantitative methods
• Maintain the enterprise risk register and provide risk‑based recommendations to leadership
• Serve as the primary liaison for internal and external audits, regulators, and assessors
• Lead audit readiness efforts, including evidence collection, control testing, documentation, and remediation tracking
• Oversee implementation and effectiveness of security controls across IT, cloud, and business systems
• Validate control performance through continuous monitoring, testing, metrics, and reporting
• Partner with engineering, SOC, and IT teams to operationalize and measure security controls
• Conduct vendor risk assessments and evaluate third‑party compliance with contractual and regulatory requirements
• Recommend risk mitigation strategies, contractual safeguards, and security requirements
• Lead security awareness and training initiatives
• Drive continuous improvement of the GRC program
• Mentor junior analysts and provide guidance to leadership