Hybrid Cybersecurity GRC Analyst: Policy & Risk

PSEG Long Island LLC; Bethpage (NY); Hybrid; USD 90,000 - 130,000; Full time

Benefits offered by this job

Medical

Dental

Vision

401(k)

Paternity leave

Tuition reimbursement

Generous paid time off

Job summary

PSEG Long Island is seeking a Cybersecurity GRC Analyst to support governance, risk, and compliance across the enterprise. You will collaborate with IT, Internal Audit, Compliance, Procurement, and business units to define, document, and monitor policies and standards aligned with risk controls.

You will perform risk assessments, document findings, coordinate audits, and help ensure remediation actions and third‑party risk reviews are completed.

Qualifications

• 2+ years in cybersecurity governance, risk, and compliance
• Experience with risk and control assessments and remediation actions
• Knowledge of cybersecurity frameworks (NIST CSF, ISO 27001, CIS Controls) and control testing

Responsibilities

• Support governance oversight for the cybersecurity program across the enterprise
• Maintain policy lifecycle management and communicate updates
• Assist with standards alignment to requirements and frameworks
• Perform risk and control assessments for systems, vendors, and projects
• Document findings and support remediation planning with stakeholders
• Coordinate audits and gather evidence for compliance activities
• Support third-party risk reviews and risk questionnaires
• Prepare executive reporting on risk posture and compliance status
• Maintain risk registers and issue logs for remediation tracking

Skills

Analytical skills

Communication

Documentation

Multitasking

Education

Bachelor’s degree in Computer Science, Information Systems, Cyber Security, Engineering or related discipline

Tools

ServiceNow

Archer

RSAM

Job description

PSEG Long Island is seeking a Cybersecurity GRC Analyst to support governance, risk, and compliance across the enterprise. You will collaborate with IT, Internal Audit, Compliance, Procurement, and business units to define, document, and monitor policies and standards aligned with risk controls.

You will perform risk assessments, document findings, coordinate audits, and help ensure remediation actions and third‑party risk reviews are completed.