GRC & Contracts Analyst – Hybrid, Data-Driven Security

Sargent & Lundy; Chicago (IL); Hybrid; USD 75,000 - 115,000; Full time

Benefits offered by this job

Hybrid work: 3 days onsite in downtown

Job summary

Sargent & Lundy is seeking a detail-oriented GRC Analyst to support the GRC team with a focus on client contract cybersecurity obligations and assurance. You will analyze contracts for cybersecurity terms, coordinate responses to client security assessments, and help organize and track contractual obligations to ensure they are met.

You will also support security awareness training, third-party risk assessments, and NIST 800-171 / ISO 27001 audit tracking.

Qualifications

• Bachelor’s degree in information systems, cybersecurity, business, or related field.
• 3–5 years of experience analyzing contracts for cybersecurity terms.
• Experience with ISO 27001 ISMS requirements and audit support.
• Proven ability to organize and track obligations with dashboards.
• Strong written and verbal communication for cross-functional stakeholders.

Responsibilities

• Analyze client contracts for cybersecurity terms and DFARS/NIST 800-171 considerations.
• Coordinate client security assessment responses and maintain evidence libraries.
• Track contract obligations and flag at-risk items to management.
• Build dashboards (Power BI/Excel) for executive reporting and metrics.
• Support security awareness training content and phishing simulations.
• Assist with Third-Party Risk Management (TPRM) vendor assessments.
• Coordinate evidence collection for NIST 800-171 and ISO 27001 audits.
• Conduct risk assessments and manage data in GRC platforms (Hyperproof/ProcessUnity).
• Collaborate with Legal, Contracts, Procurement, IT, and business teams.

Skills

Contract cybersecurity terms analysis

Data analysis & dashboards

Cross-functional coordination

Security awareness & training

Strong communication

Education

Bachelor’s degree in information systems, cybersecurity, business, or related field

Tools

Power BI

Excel

Hyperproof

ProcessUnity

Job description

Sargent & Lundy is seeking a detail-oriented GRC Analyst to support the GRC team with a focus on client contract cybersecurity obligations and assurance. You will analyze contracts for cybersecurity terms, coordinate responses to client security assessments, and help organize and track contractual obligations to ensure they are met.

You will also support security awareness training, third-party risk assessments, and NIST 800-171 / ISO 27001 audit tracking.