GRC Analyst: Risk, Compliance & Third-Party

TEKsystems; Columbia (MD); Hybrid; USD 76,000 - 83,000; Full time

Benefits offered by this job

Medical, dental & vision

401(k) Retirement Plan

Paid time off

Job summary

TEKsystems in Columbia, MD is seeking an Information Security Analyst II (GRC) to support governance, risk, and compliance activities aligned to NIST CSF, HIPAA, HITRUST, and PCI-DSS. You will contribute to policy refreshes, risk management, and third-party risk processes.

This hybrid, contract-to-hire role requires 3–5 years in information security or compliance and a related bachelor's degree. Strong collaboration and documentation skills are essential.

Qualifications

• 3–5 years of experience in information security, risk, or compliance.
• Bachelor's degree in a systems/ IT security related field.
• ISO/CISSP/CISM/CRISC ISACA preferred.
• Knowledge of NIST CSF, NIST 800-53, HIPAA, HITRUST, PCI-DSS.
• Strong analytical, documentation, and communication skills.
• Ability to work collaboratively across teams.

Responsibilities

• Support compliance initiatives aligned to NIST, HIPAA, HITRUST, PCI-DSS.
• Maintain control mappings and compliance documentation.
• Perform control testing and collect evidence for audits.
• Support HITRUST certification readiness activities.
• Support enterprise cyber-risk management activities.
• Oversee third-party risk management process.
• Maintain risk register and track remediation.
• Assist with responses to third-party security questionnaires and contract reviews.
• Develop and maintain security policies and standards.
• Maintain audit documentation repositories.
• Support reporting on compliance metrics and KPIs.
• Collaborate with cross-functional teams to address risk gaps.

Skills

HIPAA compliance

HITRUST

NIST

Information security

Education

Bachelor's degree in IT security/ systems

Job description

TEKsystems in Columbia, MD is seeking an Information Security Analyst II (GRC) to support governance, risk, and compliance activities aligned to NIST CSF, HIPAA, HITRUST, and PCI-DSS. You will contribute to policy refreshes, risk management, and third-party risk processes.

This hybrid, contract-to-hire role requires 3–5 years in information security or compliance and a related bachelor's degree. Strong collaboration and documentation skills are essential.