GRC Analyst II: HIPAA, HITRUST & 3rd-Party Risk, Hybrid

TEKsystems; United States; Hybrid; USD 76,000 - 83,000; Full time

Benefits offered by this job

Medical, dental & vision

401(k) Retirement Plan

Life Insurance

Job summary

TEKsystems is seeking an Information Security Analyst II (GRC) for a hybrid role in Columbia, MD. You will support governance, risk, and compliance efforts aligned to NIST CSF, NIST 800-53, HIPAA, HITRUST, and PCI-DSS, including risk assessments and policy governance.

The role involves HITRUST readiness, third-party risk assessments, and security questionnaire responses, with a focus on risk register management and policy development. A CISSP/CISM/CRISC is preferred.

Qualifications

• 3-5 years of information security, risk, or compliance experience.
• Bachelor's degree in a systems/IT security related field.
• CISSP, CISM or CRISC certification preferred (ISACA).
• Knowledge of NIST CSF, NIST 800-53, HIPAA, HITRUST, PCI-DSS.

Responsibilities

• Support compliance initiatives aligned to NIST, HIPAA, HITRUST, and PCI-DSS frameworks.
• Assist in maintaining control mappings and compliance documentation.
• Perform control testing and support evidence collection for audits.
• Support HITRUST certification readiness activities.
• Support third-party risk management processes and risk register updates.
• Collaborate with cross-functional teams to address risk and compliance gaps.

Skills

HIPAA compliance

HITRUST

NIST

Third party risk management

GRC

Education

Bachelor's degree in systems/ IT Security related field

Job description

TEKsystems is seeking an Information Security Analyst II (GRC) for a hybrid role in Columbia, MD. You will support governance, risk, and compliance efforts aligned to NIST CSF, NIST 800-53, HIPAA, HITRUST, and PCI-DSS, including risk assessments and policy governance.

The role involves HITRUST readiness, third-party risk assessments, and security questionnaire responses, with a focus on risk register management and policy development. A CISSP/CISM/CRISC is preferred.