Hybrid GRC Analyst | HIPAA/NIST/HITRUST

TEK Systems; Columbia (AL); Hybrid; USD 76,000 - 83,000; Full time

Job summary

TEKsystems is seeking an Information Security Analyst II (GRC) to support governance, risk, and compliance activities aligned to NIST CSF, NIST SP 800-53, HIPAA Security Rule, and HITRUST CSF. The role covers risk assessments, audit readiness, control validation, and policy governance.

The position focuses on baseline security policy refresh, third-party risk management, and collaboration across cross-functional teams in Columbia, MD.

Qualifications

• 3-5 years of experience in information security, risk, or compliance.
• Bachelor's degree in systems/ IT Security related field.
• Certified in CISSP, CISM or CRISC ISACA preferred.
• Knowledge of NIST CSF, NIST 800-53, HIPAA, HITRUST, PCI-DSS.
• Strong analytical, documentation, and communication skills.
• Ability to work collaboratively across teams.
• Self-Driven Ability to manage tasks and organize project work.

Responsibilities

• Support compliance initiatives aligned to NIST, HIPAA, and HITRUST, PCI-DSS frameworks.
• Assist in maintaining control mappings and compliance documentation.
• Perform control testing and support evidence collection for audits.
• Support HITRUST certification readiness activities.
• Support enterprise cyber-risk management activities.
• Execute and oversee the third-party risk management process.
• Maintain and update the risk register and track remediation.
• Support responses to third-party security questionnaires. Support contract review tasks in support of Cyber and Data security language.
• Assist with development and maintenance of security policies and standards.
• Maintain audit documentation repositories.
• Support reporting on compliance metrics and KPIs.
• Collaborate with cross-functional teams to address risk and compliance gaps.

Skills

Information security

Governance and Risk Management

Self-driven

Collaborative work

Education

Bachelor's degree in systems/ IT Security related field

CISSP

CISM

CRISC

Job description

TEKsystems is seeking an Information Security Analyst II (GRC) to support governance, risk, and compliance activities aligned to NIST CSF, NIST SP 800-53, HIPAA Security Rule, and HITRUST CSF. The role covers risk assessments, audit readiness, control validation, and policy governance.

The position focuses on baseline security policy refresh, third-party risk management, and collaboration across cross-functional teams in Columbia, MD.