GRC Security Analyst

Btechnical Group; Texas (NJ); On-site; USD 118,000 - 172,000; Full time

Job summary

Join a forward-thinking organization as a Governance, Risk, and Compliance Security Analyst. In this pivotal role, you will ensure the confidentiality, integrity, and availability of information assets while navigating complex regulatory landscapes. Your expertise will drive the implementation of governance frameworks and risk management strategies, safeguarding the organization against potential threats. This is an exciting opportunity to contribute to a dynamic cybersecurity team and make a significant impact on the organization's security posture. If you are passionate about cybersecurity and ready to take on new challenges, this role is perfect for you.

Benefits

Medical Insurance

401(k) Plan

Qualifications

• 7+ years of experience in cybersecurity with expertise in GRC.
• Exceptional communication skills to translate security and risk.

Responsibilities

• Conduct ongoing risk analysis and maintain oversight in a GRC platform.
• Develop risk mitigation strategies and implement controls for compliance.

Skills

Governance, Risk, and Compliance (GRC)

Cybersecurity Standards (ISO 27001, NIST)

Risk Management Principles

Written and Verbal Communication

Attention to Detail

Education

Bachelor's degree in Computer Science

Equivalent Industry Experience

Tools

GRC Systems (RSA, MetricStream, Riskonnect)

Job description

Get AI-powered advice on this job and more exclusive features.

Our client is the premier sports entertainment organization. We are looking for a Governance, Risk and Compliance (GRC) Security Analyst to join our cybersecurity team.

The GRC security analyst position is responsible for enabling the organization to comply with industry and regulatory requirements and standards for cybersecurity. As a GRC analyst you will play a vital role in ensuring the confidentiality, integrity, and availability of our organization’s information assets. You will be responsible for identifying, assessing, and managing information security risks, as well as implementing and maintaining governance frameworks to support the organization's cybersecurity objectives.

• Conduct enterprise-wide, ongoing risk analysis in coordination with compliance and security.
• Maintain oversight in a GRC-related platform.
• Identify and address weaknesses in the security program as they relate to privacy, cyber risk, business resiliency and compliance frameworks.
• Document, formulate and enforce areas of security improvement that balance risk with business operations and do not diminish efficiencies or innovation.
• Support oversight of third parties, vendors and business partners to safeguard against undue risk presented by external entities. Escalate to security management and business unit leads when points of weakness are discovered.
• Analyze and document findings, and recommend and report program gaps to security leadership.
• Monitor current and proposed security changes impacting regulatory, privacy and security industry best practice guidance. Apply GRC expertise across key lines of business, including products, practices and procedures.
• Define qualitative and quantitative metrics to assess the success of the security program and provide regular reports to security and business leadership.
• Ensure security and technology teams maintain up-to-date configuration documentation for systems and processes.
• Attend and fully engage in change and project management meetings.
• Liaison with auditors, both internal and external, to maintain and implement controls for compliance and privacy laws.
• Develop and implement risk mitigation strategies and controls to address identified risks and ensure compliance with security standards and regulations.
• Establish and maintain information security governance frameworks, policies, and procedures to guide the organization in managing and protecting sensitive information.
• Act as a point of contact for disaster recovery and business continuity as it relates to security frameworks, compliance and privacy laws.

Skills and Experience

• Bachelor’s degree in computer science, information assurance, MIS or related field, or equivalent industry experience.7+ years of experience in cybersecurity, with extensive expertise in Governance, Risk, and Compliance (GRC) and deep knowledge of risk management principles.
• Experience and understanding of various cybersecurity standards, including but not limited to ISO 27001 and NIST.
• Exceptional written and verbal communication skills, and proven ability to translate security and risk to all levels of the business.
• Attention to detail and a strong commitment to maintaining the confidentiality and integrity of information assets.
• Prior experience with leading GRC systems from vendors such as RSA, MetricStream and Riskonnect.
• Successful track record of managing external entities’ contracts and relationships, and mitigating risks to business development opportunities.

Preferred Certification Requirements: CISSP, CRISC, CGEIT or GRCP.

Seniority level

• Seniority level

  Associate

Employment type

• Employment type

  Full-time

Job function

• Job function

  Information Technology

• Industries

  Computer and Network Security

Referrals increase your chances of interviewing at Btechnical Group by 2x

Inferred from the description for this job

Medical insurance

401(k)

Get notified when a new job is posted.

Sign in to set job alerts for “Security Analyst” roles.

Senior Security Analyst - IAM/ PAM with (HiPAM (Hitachi Password Manager) - Dallas, TX or NJ

Sr. Information Systems Security Officer (ISSO)

Plano, TX $118,560.00-$171,253.33 6 months ago

Sr. Information Systems Security Officer (ISSO)

Dallas, TX $118,560.00-$171,253.33 6 months ago

Third Party Information Security Senior Assessor - IRVING

Information Systems Security Officer (ISSO)

Dallas, TX $92,213.33-$125,146.66 3 weeks ago

Information Systems Security Officer (ISSO)

Plano, TX $92,213.33-$125,146.66 3 weeks ago

Security infrastructure Consultant (SIEM platforms)

Senior Network Security Engineer – Palo Alto and Cisco

PCI Compliance Internal Security Assessor - REMOTE

Cyber Security Configuration Compliance Monitoring Analyst

Senior Security Engineer (CrowdStrike Falcon Platform)– Remote (USA)

Sr. Distinguished Engineer - Network Security (Remote Eligible)

Senior Security Engineer IAM- Okta/Auth0

Senior Business Intelligence Analyst - Data Analytics (SQL)

DoD SkillBridge - Sr Systems Security Engineer (Active Duty Military Only)

M365 Engineering Lead Analyst - VP (Hybrid)

Irving, TX $125,760.00-$188,640.00 2 weeks ago

Product Owner – Senior Lead Security Engineer

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.