GRC Cybersecurity Analyst - Policy, Risk & Compliance

Georgia Tech Research Institute; Atlanta (GA); On-site; USD 110,000 - 150,000; Full time

Job summary

Georgia Tech Research Institute (GTRI) in Atlanta, GA, seeks a seasoned GRC Cybersecurity Analyst to lead governance, risk, and compliance activities, protecting sensitive information. You will assess policies and procedures, drive risk assessments across units, and design security controls and training to meet internal and regulatory requirements.

You will monitor incidents, perform audits, and develop security policies, collaborating with IT and external partners to ensure robust cybersecurity

Qualifications

• Bachelor’s degree in cybersecurity, information security, or related field.
• 5+ years of progressively responsible experience in governance, risk, compliance, or information security in a complex environment.
• Strong practical knowledge of security technologies and controls and OS/networking basics.
• Experience with vulnerability management processes and tools.
• Excellent written and verbal communication skills, with policy, standards, and executive summaries.
• One or more intermediate or advanced cybersecurity/GRC certifications such as CISSP, CISM, CISA, SecurityX, CCNP-Security, or equivalent.

Responsibilities

• Monitor information systems for security incidents and vulnerabilities; respond to mitigate threats.
• Conduct risk assessments and security audits; identify weaknesses and remediation.
• Develop and implement security policies, standards, and procedures to protect data.
• Provide cybersecurity training and awareness programs for faculty, staff, and students; promote security culture.
• Analyze incidents to determine root causes and prevent recurrence.
• Stay informed about emerging threats and update security measures accordingly.
• Prepare and present reports on cybersecurity status, incidents, and remediation progress.
• Collaborate with external agencies and partners on cybersecurity initiatives.
• Work with IT teams to deploy security technologies (firewalls, IDS, encryption).
• Perform other duties as assigned.

Skills

Governance & risk

Regulatory compliance

Vulnerability management

Threat analysis

Policy development

Executive reporting

Stakeholder communication

Security training

Education

Bachelor’s degree in cybersecurity

5+ years experience in governance, risk, compliance or information security

CISSP / CISM / CISA or equivalent certification

Master’s degree in cybersecurity (preferred)

Tools

Confluence

Jira

Excel

Job description

Georgia Tech Research Institute (GTRI) in Atlanta, GA, seeks a seasoned GRC Cybersecurity Analyst to lead governance, risk, and compliance activities, protecting sensitive information. You will assess policies and procedures, drive risk assessments across units, and design security controls and training to meet internal and regulatory requirements.

You will monitor incidents, perform audits, and develop security policies, collaborating with IT and external partners to ensure robust cybersecurity