GRC / IT Risk Management Analyst

Insight Global; Atlanta (GA); On-site; USD 120,000 - 150,000; Full time

Job summary

Insight Global is seeking an IT risk and security expert to serve on the GRC team, leading governance, risk, and compliance efforts across the organization. The role focuses on monitoring for incidents, conducting risk assessments, and implementing security measures to protect data and satisfy regulatory requirements.

The candidate will develop security policies, deliver training, and coordinate with IT and external partners to drive remediation and continuous improvement.

Qualifications

• Bachelor’s degree in cybersecurity or related field, or equivalent experience.
• Minimum 5 years in governance, risk, compliance, or information security.
• Experience with NIST/CMMC/RMF frameworks.
• Active Secret clearance required.
• Strong written and verbal communication; ability to draft policies and executive summaries.

Responsibilities

• Monitor information systems for security incidents and vulnerabilities and respond to mitigate threats.
• Conduct risk assessments and security audits to identify weaknesses and remediation.
• Develop and implement security policies, procedures, and controls to protect data and ensure regulatory compliance.
• Provide cybersecurity training for faculty, staff, and students to promote security culture.
• Analyze incidents to determine root causes and prevent recurrence.
• Stay informed about threats and update security measures accordingly.
• Prepare reports on security status, incidents, vulnerabilities, and remediation progress.
• Collaborate with external agencies and partners on cybersecurity initiatives.
• Work with IT teams to deploy security technologies (firewalls, IDS, encryption).

Skills

Governance & risk

Vulnerability management

Security technologies

Excel data analysis

Communication skills

Policy drafting

Confluence

Jira

Education

Bachelor’s degree in cybersecurity / related field

Master’s degree

Active Secret clearance

Advanced cybersecurity certifications (CISSP/CISM/CISA)

Tools

Vulnerability scanners

Confluence

Jira

Job description

Job Description

This position is located within the GRC Team and will serve as a subject-matter expert for IT risk in the organization

Key Responsibilities

• Monitor the institution's information systems for security incidents and vulnerabilities, responding promptly to mitigate potential threats.
• Conduct regular risk assessments and security audits to identify weaknesses in the institution's cybersecurity posture and recommend remediation measures.
• Develop and implement security policies, procedures, and protocols to protect sensitive data and ensure compliance with regulatory requirements.
• Provide cybersecurity training and awareness programs for faculty, staff, and students to promote a culture of security within the institution.
• Analyze security incidents and breaches to determine their root causes and develop strategies to prevent future occurrences.
• Stay informed about emerging cybersecurity threats and trends, continuously updating security measures to address new challenges.
• Prepare and present reports on the status of cybersecurity efforts, highlighting incidents, vulnerabilities, and progress on remediation activities.
• Serve as a liaison with external agencies and partners on cybersecurity initiatives, collaborating on strategies to enhance the institution's security capabilities.
• Collaborate with IT teams to deploy security technologies, such as firewalls, intrusion detection systems, and encryption tools, to safeguard institutional data.

contract to hire120-150K, depending on level of education and experience

Skills and Requirements

• Bachelor’s degree in cybersecurity, information security, information assurance, or a related field, or an equivalent combination of education and experience.
• 5+ years of progressively responsible experience in governance, risk, compliance, or information security in a complex environment.
• Strong practical knowledge of security technologies and controls, as well as operating system platforms including Windows, macOS, Linux, and core networking technologies.
• Demonstrated experience with vulnerability management processes and tools, including scanning, reporting, prioritization, and remediation tracking.
• Solid understanding of threats, vulnerabilities, exploitation techniques, and how they map to business risk.
• Advanced experience with data analysis and reporting in Excel (pivot tables, lookups, intermediate/advanced formulas; scripting or macros a plus).
• Proven ability to assess and communicate the priority and business impact of vulnerabilities and risks to both technical and non-technical stakeholders.
• Excellent written and verbal communication skills, including experience drafting policies, standards, and executive-level summaries.
• One or more intermediate or advanced cybersecurity/GRC certifications such as CISSP, CISM, CISA, SecurityX, CCNP-Security, or equivalent.
• Active Secret clearance.
• Master’s degree in cybersecurity, information security, information assurance, business, or a related field.
• Deep understanding of cybersecurity frameworks and best practices such as NIST 800-53/171, CMMC, RMF, MITRE ATT&CK, and OWASP Top 10.
• Demonstrated experience leading audit, assessment, or certification efforts (e.g., NIST, CMMC, DFARS, FedRAMP, or similar).
• Experience developing and tracking security and compliance metrics for remediation stakeholders and leadership.
• Strong knowledge of common vulnerability categorizations and scoring systems such as CVE, CVSS, and CWE.
• Proficiency with Atlassian Confluence for documentation and knowledge management.
• Proficiency with Atlassian Jira for workflow, issue tracking, and project management.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to [e-mail].