Cyber Security Associate - Bethpage, NY

VetJobs

Bethpage (NY)

Hybrid

USD 79,000 - 126,000

Full time

31 hours ago

Be an early applicant

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Job summary

PSEG Long Island in Bethpage, NY is seeking a Cybersecurity GRC Analyst to help govern risk, policy lifecycle, and control maturity across the enterprise. The role collaborates with IT, Internal Audit, Compliance and Procurement to document controls and coordinate audits.

The ideal candidate has a Bachelor’s degree in CS/IS/Cyber Security/Engineering with 2+ years of GRC experience, or 6 years of relevant work without a degree; familiarity with ServiceNow, Archer, and RSAM is expected.

Qualifications

Bachelor’s degree in CS/IS/Cyber Security/Engineering with 2+ years in cyber GRC.
Alternatively, 6 years of cyber GRC experience without a degree.
Proficiency with Cyber GRC tools such as ServiceNow, Archer, RSAM.
Experience in risk and control assessments and remediation actions.
Experience in audit coordination and compliance validation.
Strong analytical, organizational, reporting, and documentation skills.
Excellent written and verbal communication.
Ability to manage multiple priorities with limited supervision.

Responsibilities

Support governance oversight of the cybersecurity program.
Maintain policy lifecycle management and documentation.
Assist with standards alignment to requirements and frameworks.
Perform risk and control assessments for systems and vendors.
Identify control gaps and support remediation planning.
Support audit coordination and evidence gathering.
Support third-party risk review and due diligence.
Prepare executive risk and compliance reporting.

Skills

GRC knowledge

Risk assessments

Audit coordination

Policy lifecycle

Communication skills

Multitasking

Education

Bachelor’s degree in CS/IS/Cyber Security/Engineering

6 years cyber GRC experience without a degree

Tools

ServiceNow

Archer

RSAM

Job description

Minimum Education Required

ATTENTION MILITARY AFFILIATED JOB SEEKERS - Our organization works with partner companies to source qualified talent for their open roles. The following position is available to Veterans, Transitioning Military, National Guard and Reserve Members, Military Spouses, Wounded Warriors, and their Caregivers. If you have the required skill set, education requirements, and experience, please click the submit button and follow the next steps. All positions are onsite, unless otherwise stated.

PSEG Company: PSEG Long Island

Salary Range: $ 79,400 - $ 125,600

Work Location Category: Hybrid

Hybrid: A blend of remote and onsite work, with at least three onsite days per week required.

PSEG is not offering visa sponsorship for this position.

Job Summary

This position supports the organization’s cybersecurity governance, risk, and compliance program through governance oversight, policy lifecycle management, standards alignment, risk and control assessments, audit coordination, compliance validation, issue remediation tracking, third-party risk review, and executive reporting and documentation.

The Cybersecurity GRC Analyst works closely with IT, Internal Audit, Compliance, Procurement, and business stakeholders to help ensure cybersecurity requirements are defined, documented, assessed, and monitored across the enterprise. This role is responsible for supporting the maintenance of cybersecurity policies and standards, conducting and documenting risk assessments, evaluating control effectiveness, coordinating audit and compliance activities, tracking remediation efforts, and preparing clear reporting for management and leadership.

Job Responsibilities

Support governance oversight activities for the cybersecurity program across the enterprise.
Maintain and support policy lifecycle management, including the review, update, and communication of cybersecurity policies, standards, procedures, and related documentation.
Assist with standards alignment to applicable requirements, contractual obligations, and recognized cybersecurity frameworks.
Perform and document risk and control assessments for systems, applications, vendors, projects, and business processes.
Identify control gaps, document findings, and support risk treatment planning with business and technical stakeholders.
Assist with control documentation and control testing to evaluate design and operating effectiveness.
Provide audit coordination support for internal audits, external audits, and regulatory assessments, including evidence gathering, response tracking, and issue follow-up.
Support compliance validation activities to confirm required controls, processes, and documentation are in place and operating as intended.
Support third-party risk review activities, including security questionnaires, documentation review, assessment follow-up, and findings management.
Maintain risk registers, issue logs, exception records, remediation plans, and supporting documentation.
Perform issue remediation tracking and follow up with stakeholders to support timely closure of findings, gaps, and action items.
Prepare executive reporting and documentation related to risk posture, compliance status, audit results, remediation progress, control maturity, and key metrics.
Support governance committees, risk discussions, and management reporting through accurate and organized documentation.
Contribute to continuous improvement of GRC processes, templates, reporting and governance practices.

Auto req ID 486286BR

Minimum Education Required

Bachelors

Required Experience

Job Specific Qualifications

Bachelor’s degree in Computer Science, Information Systems, Cyber Security, Engineering or related discipline with 2 or more years of experience in cybersecurity governance, risk, compliance, IT audit, internal controls, or related field.
Candidates without a degree who have 6 years of experience in cyber security governance risk and compliance will be considered.
Proficiency with Cyber GRC technologies (such as ServiceNow, Archer, RSAM, etc.) Background supporting governance oversight, policy lifecycle management, and standards alignment activities.
Experience performing risk and control assessments and documenting findings, recommendations, and remediation actions.
History of supporting control testing, audit coordination, and compliance validation activities.
Direct involvement with third-party risk review, vendor assessment support, or related due diligence functions.
Familiarity with issue remediation tracking, exception management, and reporting processes.
Advanced analytical, organizational, reporting, and documentation skills.
Excellent written and verbal communication skills with the ability to work effectively with technical and non-technical stakeholders.
Ability to manage multiple priorities, maintain detailed records, and work independently with limited supervision.
Department of Energy’s regulation 10 CFR 810 is required

Please Note the Following

This position falls under the North American Electric Reliability Corporation (NERC) Critical Infrastructure Protection (CIP) and requires NERC CIP background investigation prior to start.

Some positions at PSEG require access to information covered by the Department of Energy’s regulation 10 CFR 810 (Part 810). If applicable, the successful applicant must prove they are: (1) a citizen or national of the USA; OR (2) a lawful permanent resident of the United States (Non-Conditional Permanent I-551 / Green Card / Permanent Resident Card holder); OR (3) a citizen, national, or permanent resident of a “Generally Authorized” destination on the attached list and not also a citizen, national, permanent resident of any country not listed; OR (4) a “Protected Individual” under the Immigration and Naturalization Act (8 U.S.C 1324b(a)(3)).

Desired

Preferred Experience

Working knowledge of cybersecurity frameworks and control standards such as NIST CSF, NIST SP 800-53, ISO 27001, and CIS Controls.
Cybersecurity certification such as Security+, CISSP, CISA

Desired

Certificates/Security Clearances/Other