GRC Security Analyst: HIPAA/HITRUST & Third-Party Risk

TEKsystems; Columbia (MD); Hybrid; USD 114,000 - 125,000; Full time

Benefits offered by this job

Medical, dental & vision

401(k) Retirement Plan

Life Insurance

PTO / Vacation

Short and long-term disability

Transit benefits

Employee Assistance Program

Job summary

TEKsystems in Columbia, MD is seeking an Information Security Analyst II (GRC) to support governance, risk, and compliance activities aligned to NIST, HIPAA, HITRUST, and PCI-DSS. The role focuses on risk assessments, audit readiness, control validation, and policy governance.

You will help refresh baseline security policies, manage third-party risk, and support HITRUST readiness, risk registers, questionnaires, and security standards development.

Qualifications

• 3-5 years of experience in information security, risk, or compliance.
• Bachelor's degree in systems/ IT Security related field.
• Certified in CISSP, CISM or CRISC –ISACA preferred.
• Knowledge of NIST CSF, NIST 800-53, HIPAA, and HITRUST, PCI-DSS.
• Strong analytical, documentation, and communication skills.

Responsibilities

• Support compliance initiatives aligned to NIST, HIPAA, and HITRUST, PCI-DSS frameworks.
• Assist in maintaining control mappings and compliance documentation.
• Perform control testing and support evidence collection for audits.
• Support HITRUST certification readiness activities.
• Support enterprise cyber-risk management activities.
• Execute and oversee the third-party risk management process.
• Maintain and update the risk register and track remediation.
• Support responses to third-party security questionnaires and contract review tasks.
• Assist with development and maintenance of security policies and standards.
• Maintain audit documentation repositories.
• Support reporting on compliance metrics and KPIs.
• Collaborate with cross-functional teams to address risk and compliance gaps.

Skills

hipaa compliance

hitrust

nist

third party risk management

grc

Education

Bachelor's degree in systems/ IT Security related field

Job description

TEKsystems in Columbia, MD is seeking an Information Security Analyst II (GRC) to support governance, risk, and compliance activities aligned to NIST, HIPAA, HITRUST, and PCI-DSS. The role focuses on risk assessments, audit readiness, control validation, and policy governance.

You will help refresh baseline security policies, manage third-party risk, and support HITRUST readiness, risk registers, questionnaires, and security standards development.