Cybersecurity & GRC Analyst

Goosehead-Insurance; Westlake (OH); On-site; USD 70,000 - 100,000; Full time

Job summary

Goosehead Insurance in Ohio seeks a Cybersecurity Analyst to protect data, systems, and infrastructure. The role focuses on assessing controls, managing vendor risk, and ensuring regulatory compliance.

You will monitor alerts from SIEM/EDR, conduct investigations, perform vulnerability assessments, and support audits. Collaboration with IT, legal, HR, and audit teams is essential to improve security posture.

Qualifications

• Bachelor’s degree in a cybersecurity-related field.
• 2–5+ years in cybersecurity or IT security.
• Relevant certifications (e.g., CISSP, CISA, CRISC, CEH) preferred.

Responsibilities

• Monitor security alerts from SIEM, EDR, firewalls, and network traffic.
• Investigate incidents, identify root causes, and recommend remediation.
• Perform vulnerability assessments and support pen testing.
• Maintain security policies aligned with NIST/ISO/CIS and regulations.
• Support GRC activities, risk assessments, and audits.
• Collaborate with IT, legal, HR, and audit on security projects.

Skills

Analytical thinking

Communication skills

Documentation

Problem solving

Education

Bachelor's degree in Cybersecurity, CS, or related field

Tools

SIEM

Vulnerability Scanners

Endpoint Protection

Job description

Goosehead Insurance in Ohio seeks a Cybersecurity Analyst to protect data, systems, and infrastructure. The role focuses on assessing controls, managing vendor risk, and ensuring regulatory compliance.

You will monitor alerts from SIEM/EDR, conduct investigations, perform vulnerability assessments, and support audits. Collaboration with IT, legal, HR, and audit teams is essential to improve security posture.