Hybrid Cyber GRC Analyst: Risk, Policy & Audit

MSCCN; Bethpage (NY); Hybrid; USD 94,000 - 148,000; Full time

Job summary

PSEG Long Island is seeking a Cybersecurity GRC Analyst to support governance, risk, and compliance within the cybersecurity program. You will work with IT, Internal Audit, Compliance, and Procurement to ensure policies and controls are defined, implemented, and monitored enterprise-wide.

Key tasks include risk and control assessments, policy lifecycle management, audit coordination, remediation tracking, third‑party risk review, and executive reporting.

Qualifications

• Bachelor's degree in a related discipline.
• 4+ years of cybersecurity governance, risk, compliance, IT audit, or related field.
• 8+ years considered with no degree.
• Proficiency with Cyber GRC technologies (ServiceNow, Archer, RSAM).
• Experience in policy lifecycle management and standards alignment.
• Experience in risk and control assessments and documenting findings.

Responsibilities

• Support governance oversight activities for the cybersecurity program across the enterprise.
• Maintain and support policy lifecycle management, including review, update, and communication of cybersecurity policies, standards, procedures, and related documentation.
• Assist with standards alignment to applicable requirements, contractual obligations, and recognized cybersecurity frameworks.
• Perform and document risk and control assessments for systems, applications, vendors, projects, and business processes.
• Identify control gaps, document findings, and support risk treatment planning with business and technical stakeholders.
• Assist with control documentation and control testing to evaluate design and operating effectiveness.
• Provide audit coordination support for internal audits, external audits, and regulatory assessments, including evidence gathering, response tracking, and issue follow-up.
• Support compliance validation activities to confirm required controls, processes, and documentation are in place and operating as intended.
• Support third-party risk review activities, including security questionnaires, documentation review, assessment follow-up, and findings management.
• Maintain risk registers, issue logs, exception records, remediation plans, and supporting documentation.
• Perform issue remediation tracking and follow up with stakeholders to support timely closure of findings, gaps, and action items.
• Prepare executive reporting and documentation related to risk posture, compliance status, audit results, remediation progress, control maturity, and key metrics.
• Support governance committees, risk discussions, and management reporting through accurate and organized documentation.
• Contribute to continuous improvement of GRC processes, templates, reporting, and governance practices.

Skills

Governance oversight

Policy lifecycle management

Standards alignment

Risk and control assessments

Audit coordination

Compliance validation

Third‑party risk review

Reporting and documentation

Effective communication

Time management

Education

Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Business, Risk Management or related

Tools

ServiceNow

Archer

RSAM

Job description

PSEG Long Island is seeking a Cybersecurity GRC Analyst to support governance, risk, and compliance within the cybersecurity program. You will work with IT, Internal Audit, Compliance, and Procurement to ensure policies and controls are defined, implemented, and monitored enterprise-wide.

Key tasks include risk and control assessments, policy lifecycle management, audit coordination, remediation tracking, third‑party risk review, and executive reporting.