GRC Automation & Cyber Controls Analyst — Remote

Blue Cross Blue Shield of Nebraska; Omaha (NE); Hybrid; USD 85,000 - 120,000; Full time

Job summary

Blue Cross Blue Shield of Nebraska seeks a cybersecurity/GRC analyst to validate controls across a regulated technology environment. You will perform risk-based assessments, test controls, and translate findings into remediation plans.

The role blends hands-on security testing with governance, risk, and reporting, with remote-flexibility and 1–2 days in the Omaha office. Strong collaboration with risk, audit, and business teams is essential, and travel to headquarters may be required for

Qualifications

• Bachelor's degree in Cybersecurity, IT, Computer Science, Risk Management, or related field, or equivalent experience.
• 3–5 years of experience in cybersecurity assurance, security operations, cybersecurity engineering, penetration testing, IT audit, GRC, risk management, or related experience.
• Experience performing cybersecurity control testing, technical assessments, configuration reviews, vulnerability validation, or security assessments.
• Working knowledge of cybersecurity frameworks such as NIST, CIS Controls, HITRUST, HIPAA, or ISO 27001.
• Experience interpreting technical evidence and translating cybersecurity findings into practical risk and remediation recommendations.

Responsibilities

• Perform risk-based control assessments across a modern, regulated technology environment.
• Validate security posture, identify misconfigurations and control failures, assess attack paths, and recommend remediation.
• Support GRC and continuous-control-monitoring capabilities, including automated evidence collection and reporting.
• Collaborate with cybersecurity, technology, risk, audit and business teams to support audits and regulatory reviews and drive improvements.

Skills

Cybersecurity experience

Risk management

Technical assessments

Communication to stakeholders

Education

Bachelor's degree in Cybersecurity/IT/CS/Risk management

Tools

GRC platforms

Continuous-control-monitoring platforms

Job description

Blue Cross Blue Shield of Nebraska seeks a cybersecurity/GRC analyst to validate controls across a regulated technology environment. You will perform risk-based assessments, test controls, and translate findings into remediation plans.

The role blends hands-on security testing with governance, risk, and reporting, with remote-flexibility and 1–2 days in the Omaha office. Strong collaboration with risk, audit, and business teams is essential, and travel to headquarters may be required for