Hybrid Cyber Security GRC Analyst II

Invenergy; Chicago (IL); Hybrid; USD 75,000 - 103,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401k

Paid time off

Job summary

Invenergy is seeking an Analyst II, Information and Cyber Security to advance enterprise GRC programs and security controls across the organization. This role provides exposure to risk management, third-party assessments, audits, and security program operations within a growing cybersecurity program.

Responsibilities include policy enforcement, control catalog maintenance, NERC CIP compliance support, and cross-functional collaboration with Legal, IT, and Security Architecture.

Qualifications

• Bachelor’s degree or equivalent experience in cybersecurity, IT security, or GRC.
• 2+ years of cybersecurity, IT security, or GRC experience.
• Foundational knowledge of security frameworks (e.g., NIST SP 800-53, ISO 27001, CIS Controls).

Responsibilities

• Support the development, maintenance, and enforcement of security policies, standards, and procedures across the enterprise.
• Maintain and enhance the security controls catalog, aligning to frameworks such as CIS Controls, NERC CIP, NIST CSF, ISO 27001.
• Perform control assessments to evaluate design and operating effectiveness; identify gaps and track remediation efforts.
• Develop and maintain dashboards, metrics, and reporting to measure control performance and program maturity.
• Support NERC CIP compliance activities, including evidence collection, audit coordination, remediation tracking, and follow-up activities.

Skills

Analytical skills

Communication

Self-starter

Education

Bachelors degree in Cybersecurity/IT/Info Systems

Tools

ServiceNow

Archer

Smartsheet

Job description

Invenergy is seeking an Analyst II, Information and Cyber Security to advance enterprise GRC programs and security controls across the organization. This role provides exposure to risk management, third-party assessments, audits, and security program operations within a growing cybersecurity program.

Responsibilities include policy enforcement, control catalog maintenance, NERC CIP compliance support, and cross-functional collaboration with Legal, IT, and Security Architecture.