Cybersecurity GRC Senior Analyst

SAIC; Yorktown (VA); À distance; USD 110 000 - 160 000; Plein temps

Résumé du poste

SAIC is seeking a Cybersecurity GRC Senior Analyst to join the Governance, Risk and Compliance (GRC) Team. This role may be remote anywhere in the United States and focuses on enterprise cyber risk management, control validation, and continuous improvement of the Cybersecurity Risk Management Program.

Responsibilities include leading risk assessments, coordinating remediation, and supporting audits. The role requires strong communication, stakeholder collaboration, and knowledge of frameworks

Qualifications

• Bachelor’s degree in Information Technology or similar discipline plus 5 years of experience, or Master’s degree with 3 years of experience.
• Certifications such as CISA, CISSP, CISM, or Security+.
• Experience with cybersecurity frameworks/regulations (NIST RMF, NIST SP 800-53/171, ISO/IEC 27001, COBIT, COSO).

Responsabilités

• Maintain awareness of cybersecurity trends to inform risk mitigation.
• Lead application, system, and vendor risk assessments and document results.
• Coordinate remediation through mitigation plans and support remediation closure.
• Conduct third‑party risk assessments with procurement, legal, and owners.
• Assess supply chain risk and compliance; perform risk management activities.
• Validate security controls per NIST SP 800‑171 and monitor its effectiveness.
• Manage vulnerability and pen test findings; coordinate remediation with owners.
• Support audits (ISO/IEC 27001, SOC reports) and prepare audit evidence.
• Develop policies/standards and provide training to stakeholders.
• Assist with GRC tooling configuration (ServiceNow GRC) for evidence and reporting.
• Elevate material risks to senior leadership with clear risk statements.

Connaissances

Cybersecurity frameworks

Risk assessment

Vendor risk management

Regulatory compliance

Security controls

Communication

Formation

Bachelor's degree in IT or related

Master's degree

Certifications: CISA/CISSP/CISM/Security+

Outils

ServiceNow GRC

Description du poste

SAIC is seeking a Cybersecurity GRC Senior Analyst to join the Governance, Risk and Compliance (GRC) Team. For the right candidate, this position may be remote anywhere in the United States.

The Cybersecurity Governance, Risk, and Compliance (GRC) Senior Analyst supports enterprise cyber risk management by leading application, system, and vendor risk assessments; validating control effectiveness; coordinating remediation through mitigation plans; and driving continuous improvement of the Cybersecurity Risk Management Program. The role operates as a second line of defense partner to technical process teams and stakeholders, ensuring risk-informed decisions and measurable risk reduction in alignment with regulatory and enterprise standards.

Responsibilities include:

• Maintain current awareness of cybersecurity trends and threats to inform risk mitigation strategies.
• Assist with application and system/infrastructure risk assessments and reassessments; document results and track remediation to closure.
• Conduct third‑party (vendor) risk assessments; collaborate with procurement, legal, and business owners on risk treatment.
• Conduct supply chain risk management risk and compliance assessments.
• Assist with operational cyber activities including, but not limited to carbon black application whitelisting reviews, processing international travel requests and managing violations, software assessments/evaluations.
• Select, implement, and assess security controls per NIST SP 800‑171; validate effectiveness.
• Drive continuous monitoring using NIST SP 800‑39; maintain dashboards and key risk indicators.
• Manage vulnerability and penetration test findings; coordinate with system owners to remediate within SLAs.
• Author and maintain risk management program documentation; prepare audit evidence and participate in internal/external audits (ISO/IEC 27001, SOC reports, and related standards).
• Recommend updates to cybersecurity policies, standards, and procedures based on control gaps and remediation outcomes.
• Develop and deliver training and guidance to stakeholders to strengthen a risk‑aware culture.
• Assist with configuration and maintenance of GRC tooling (e.g., ServiceNow GRC or equivalent) to support workflow, evidence management, and reporting.
• Collaborate across security, IT, and business teams; elevate material risks to senior leadership with clear risk statements and options.

Qualifications

Required Skills:

• Bachelor’s degree in Information Technology or similar discipline and 5 years of experience, or Master’s Degree and 3 years of experience. An additional 4+ years of experience may be considered in lieu of a degree.
• Certifications such as CISA, CISSP, CISM, or Security+.
• Comprehensive understanding and applied experience with cybersecurity frameworks and regulations (NIST RMF, NIST SP 800‑53/171, ISO/IEC 27001, COBIT, COSO, MITRE, ITIL, HITRUST, SOC reporting).
• Ability to categorize systems and information per FIPS 199 and NIST SP 800‑60.
• Strong analytical skills; able to synthesize complex information and defend independent judgments.
• Excellent written and verbal communication; able to translate technical risk into business‑focused language and narratives.
• Strategic and self‑directed work style with effective collaboration and negotiation across diverse stakeholders.
• Demonstrated ability to manage multiple projects, prioritize based on urgency and impact, and meet deadlines.

Desired Skills:

• Working knowledge of ServiceNow and/or other GRC tools.
• Working knowledge of security tools for vulnerability scanning, DLP, endpoint protection, etc.
• Technical proficiency in Cybersecurity.

SAIC® is a premier mission integrator focused on advancing the power of technology and innovation to serve and protect our world. Our robust portfolio of offerings across the defense, space, intelligence, and civilian markets includes secure high-end solutions in mission IT, enterprise IT, engineering services, and professional services. We integrate emerging technology, rapidly and securely, into mission critical operations that modernize and enable critical national imperatives.

We are approximately 23,000 strong; driven by mission, united by purpose, and inspired by opportunities. SAIC is an Equal Opportunity Employer. Headquartered in Reston, Virginia, SAIC has annual revenues of approximately $7.3 billion. For more information, visit saic.com. For ongoing news, please visit our newsroom.