GRC Cybersecurity Analyst - Policy & Compliance

Invenergy, LLC; Chicago (IL); Hybrid; USD 75,000 - 103,000; Full time

Benefits offered by this job

Medical, dental and vision insurance

401k

Paid time off

Job summary

Invenergy LLC is seeking a Analyst II, Information and Cyber Security to support enterprise governance, risk, and compliance programs. You will focus on security controls, policy governance, and regulatory compliance, while contributing to risk management, audits, and program operations.

The role provides exposure to multiple cybersecurity domains and growth within a expanding program aligned with industry best practices.

Qualifications

• Bachelor’s degree or equivalent experience in cybersecurity, IT, or information systems.
• 2+ years in cybersecurity, IT security, or GRC-related roles.
• Foundational knowledge of security frameworks (NIST 800-53, ISO 27001, CIS Controls).
• Experience supporting audits, compliance programs, or control assessments.
• Strong analytical and problem-solving skills with attention to detail.
• Ability to manage multiple priorities and drive tasks to completion.
• Effective communication with technical and non-technical stakeholders.
• Self-starter with the ability to work independently and across teams.

Responsibilities

• Develop, maintain, and enforce security policies, standards, and procedures enterprise-wide.
• Maintain and enhance the security controls catalog aligned to CIS Controls, NERC CIP, NIST CSF, ISO 27001.
• Perform control assessments to evaluate design and operating effectiveness; identify gaps and track remediation.
• Develop dashboards, metrics, and reporting to measure control performance and program maturity.
• Support NERC CIP compliance activities, including evidence collection, audit coordination, remediation tracking.
• Assist in commissioning and compliance validation, documentation standardization and process improvement.
• Collaborate with IT and business stakeholders to communicate security requirements and drive compliance.
• Contribute to third-party risk management, vendor security assessments, and risk documentation.
• Assist in responding to customer security questionnaires, audits, attestations, and evidence requests.
• Support contract reviews by identifying cybersecurity requirements and potential risk exposures.
• Coordinate with enterprise risk management on risk identification and remediation tracking.
• Track and report cybersecurity KPIs and program metrics; identify trends and opportunities.
• Liaise with Legal, Information Governance, Security Operations, Infrastructure, and Security Architecture.
• Participate in cross-functional cybersecurity initiatives and provide operational support across programs.
• Support incident response activities and post-incident reviews as needed.

Skills

Security frameworks

Analytical skills

Problem solving

Communication skills

Self-starter

Education

Bachelor’s degree in Cybersecurity, Information Technology, Information Systems, or related field

Tools

ServiceNow

Archer

Smartsheet

Job description

Invenergy LLC is seeking a Analyst II, Information and Cyber Security to support enterprise governance, risk, and compliance programs. You will focus on security controls, policy governance, and regulatory compliance, while contributing to risk management, audits, and program operations.

The role provides exposure to multiple cybersecurity domains and growth within a expanding program aligned with industry best practices.