Cybersecurity & GRC Analyst

Goosehead Insurance; United States; On-site; USD 110,000 - 150,000; Full time

Job summary

Goosehead Insurance is seeking a Cybersecurity Analyst to protect the company’s data, systems, and infrastructure. You will assess security controls, manage vendor risk, and collaborate with internal teams to ensure regulatory compliance.

Join a team that emphasizes world-class service and extraordinary people as you help develop security policies, support audits, and drive GRC initiatives across the organization.

Qualifications

• 2–5+ years of cybersecurity or IT security experience.
• Experience with GRC/compliance activities is a plus.

Responsibilities

• Monitor and analyze security alerts from SIEM, EDR, firewalls, and network traffic.
• Investigate security incidents and determine remediation steps.
• Conduct vulnerability assessments and support penetration testing.
• Develop, review, and maintain cybersecurity policies, standards, and procedures aligned with NIST/ISO CIS controls.
• Support GRC activities, risk assessments, risk register, and remediation plans.
• Assist with internal and external compliance audits and evidence collection.
• Monitor and report on compliance metrics and risk trends for management/audit purposes.
• Develop and implement security controls to protect networks, systems, and data.
• Collaborate with IT, legal, HR, and audit on security projects and training.
• Stay current on threats and regulatory changes; contribute to security posture improvements.

Skills

Cybersecurity experience

Security tools proficiency

Communication skills

Documentation

Education

Bachelor's degree in Cybersecurity, Computer Science, IT or related field

Certifications such as Security+, CySA+, CEH, GIAC, CISA, CRISC, CISSP preferred

Job description

Goosehead Insurance is seeking a Cybersecurity Analyst to protect the company’s data, systems, and infrastructure. You will assess security controls, manage vendor risk, and collaborate with internal teams to ensure regulatory compliance.

Join a team that emphasizes world-class service and extraordinary people as you help develop security policies, support audits, and drive GRC initiatives across the organization.