GRC Security Analyst — HIPAA/NIST Focus (Hybrid)

TEKsystems; United States; Hybrid; USD 76,000 - 83,000; Full time

Benefits offered by this job

Medical, dental & vision

401(k) Retirement Plan

Life Insurance

Disability protection

HSA options

Time Off/ PTO

Job summary

TEKsystems is seeking an Information Security Analyst II (GRC) to support governance, risk, and compliance efforts aligned to NIST CSF, NIST SP 800-53, HIPAA, HITRUST, and PCI-DSS in a hybrid Columbia, MD environment.

You will assist with risk assessments, audit readiness, control validation, policy governance, and third‑party risk management, maintaining the risk register and supporting security questionnaires and contract review tasks.

Qualifications

• 3–5 years of experience in information security, risk, or compliance.
• Bachelor's degree in a systems/IT security related field.
• CISSP, CISM or CRISC ISACA preferred.
• Knowledge of NIST CSF, NIST 800-53, HIPAA, HITRUST and PCI-DSS.
• Strong analytical, documentation, and communication skills.

Responsibilities

• Support compliance initiatives aligned to NIST, HIPAA, HITRUST, PCI-DSS frameworks.
• Assist in maintaining control mappings and compliance documentation.
• Perform control testing and support evidence collection for audits.
• Support HITRUST certification readiness activities.
• Support enterprise cyber-risk management activities.
• Execute and oversee the third-party risk management process.
• Maintain and update the risk register and track remediation.
• Support responses to third-party security questionnaires and contract reviews.
• Assist with development and maintenance of security policies and standards.
• Maintain audit documentation repositories.
• Support reporting on compliance metrics and KPIs.
• Collaborate with cross-functional teams to address risk and compliance gaps.

Skills

HIPAA compliance

HITRUST

NIST

Information security

Security

Education

Bachelor's degree in systems/ IT Security related field

Job description

TEKsystems is seeking an Information Security Analyst II (GRC) to support governance, risk, and compliance efforts aligned to NIST CSF, NIST SP 800-53, HIPAA, HITRUST, and PCI-DSS in a hybrid Columbia, MD environment.

You will assist with risk assessments, audit readiness, control validation, policy governance, and third‑party risk management, maintaining the risk register and supporting security questionnaires and contract review tasks.