Cybersecurity Analyst: Threat Detection & GRC

Goosehead Insurance Agency LLC; Westlake (TX); On-site; USD 90,000 - 140,000; Full time

Job summary

Goosehead Insurance Agency LLC is seeking a Cybersecurity Analyst to protect data, systems, and infrastructure. You will assess security controls, manage vendor risk, and ensure regulatory compliance across the organization.

Responsibilities include monitoring alerts, investigations, risk assessments, policy development, and support for audits and GRC initiatives. Collaboration with IT, legal, HR, and audit is essential.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, or related field.
• 2–5+ years of experience in cybersecurity or IT security; GRC/compliance experience a plus.
• Certifications such as Security+, CySA+, CEH, GIAC, CISA, CRISC, or CISSP preferred.
• Proficiency with security tools (SIEM, vulnerability scanners, endpoint protection) and knowledge of NIST/MITRE ATT&CK.

Responsibilities

• Monitor and analyze security alerts from SIEM, EDR, firewalls, and network traffic.
• Investigate security incidents, determine root causes, and recommend remediation steps.
• Conduct vulnerability assessments and support pen testing; perform risk evaluations.
• Develop and maintain cybersecurity policies, standards, and procedures aligned to frameworks (NIST, ISO 27001, CIS).
• Support GRC activities: risk assessments, risk register, gap analyses, mitigation tracking.
• Assist audits, evidence collection, vendor risk assessments, and remediation of findings.
• Monitor compliance metrics, regulatory changes, and risk trends; report to management and audits.
• Develop and implement security controls to protect networks, systems, and data.
• Respond to and mitigate cybersecurity incidents: containment, eradication, recovery.
• Collaborate with IT, legal, HR, and audit on security projects and training.
• Stay current on threats, regulations, and best practices.

Skills

Problem solving

Analytical thinking

Communication

Documentation

Education

Bachelor's degree in Cybersecurity/CS/related

Tools

SIEM

Vulnerability scanners

Endpoint protection

Job description

Goosehead Insurance Agency LLC is seeking a Cybersecurity Analyst to protect data, systems, and infrastructure. You will assess security controls, manage vendor risk, and ensure regulatory compliance across the organization.

Responsibilities include monitoring alerts, investigations, risk assessments, policy development, and support for audits and GRC initiatives. Collaboration with IT, legal, HR, and audit is essential.