GRC Cyber Risk Analyst — HIPAA, NIST, ISO

Insight Global (United States); Norfolk (VA); On-site; USD 55,000 - 83,000; Full time

Job summary

Insight Global is seeking an experienced cybersecurity risk professional to conduct comprehensive risk assessments across applications, systems, and enterprise initiatives. The role involves leading HIPAA Security Risk Assessments (SRA) and HICP assessments, documenting findings, and guiding remediation priorities with stakeholders.

You'll evaluate risks using ISO, COBIT, and NIST frameworks, manage risk registers in ServiceNow, and oversee policy exception processes while communicating

Qualifications

• 4+ years in cybersecurity risk management, with enterprise-level risk assessments.
• Bachelor’s degree in Cybersecurity, IT, Computer Science, or related field or equivalent certifications.
• Hands-on experience with GRC platforms, especially ServiceNow risk and compliance modules.
• Experience conducting HIPAA/HICP risk assessments and mitigations.
• Ability to manage multiple projects and work with cross-functional teams.
• Certifications such as CRISC, CISM, CISSP, or CISA preferred.

Responsibilities

• Conduct comprehensive risk assessments across applications, systems, and enterprise initiatives.
• Lead or support HIPAA Security Risk Assessments (SRA) and/or HICP assessments, documenting findings and remediation priorities.
• Perform risk ratings using ISO, COBIT, and NIST frameworks in collaboration with stakeholders.
• Develop and implement risk mitigation aligned with NIST, ISO 27001, HIPAA.
• Utilize ServiceNow to manage risk registers, remediation plans, reports, and metrics.
• Manage policy exception processes including documentation and approvals.

Skills

Risk management

HIPAA

NIST

ServiceNow

GRC tooling

Policy management

Stakeholder collaboration

Education

Bachelor’s degree in cybersecurity or related field

Tools

ServiceNow – Risk/Compliance

Job description

Insight Global is seeking an experienced cybersecurity risk professional to conduct comprehensive risk assessments across applications, systems, and enterprise initiatives. The role involves leading HIPAA Security Risk Assessments (SRA) and HICP assessments, documenting findings, and guiding remediation priorities with stakeholders.

You'll evaluate risks using ISO, COBIT, and NIST frameworks, manage risk registers in ServiceNow, and oversee policy exception processes while communicating