Hybrid GRC Cybersecurity Analyst: Lead Risk & Compliance

Request Technology, LLC; Chicago (IL); Hybrid; USD 110,000 - 180,000; Full time

Job summary

Request Technology, LLC is seeking a seasoned Information Security professional to lead responses to client security assessments, questionnaires, and audits, and to document evidence and risk findings. You will create and maintain security policies, standards, guidelines, and supporting documentation while guiding IT risk, compliance, and governance across the organization.

The role also oversees vendor risk management, security exceptions, and the Security Awareness program, requiring clear

Qualifications

• Bachelor's degree or equivalent with 5 years of IT security experience.
• CISSP, CISA, CISM or equivalent certifications preferred.
• 4+ years in Information Security with hands-on technical experience.
• Strong knowledge of ISO 27001, NIST, SOC, SIG frameworks.
• Experience in AI governance, security, and risk management.
• Ability to communicate complex topics to varied audiences.

Responsibilities

• Lead responses to client security assessments, questionnaires, and audits.
• Create, maintain, and evolve security policies, standards, and guidelines.
• Manage IT security programs ensuring compliance across the organization.
• Advise stakeholders on security topics as an SME.
• Oversee third-party security vendor risk management program.
• Oversee security exception process and risk treatment guidance.
• Lead Security Awareness program lifecycle and evaluation.
• Support and optimize GRC platforms and workflows.
• Evaluate IT programs for alignment with security standards.

Skills

IT Security

Risk assessment

Security governance

Policy writing

Stakeholder communication

Vendor risk management

Education

Bachelor's degree

Tools

GRC platforms

SIEM

Job description

Request Technology, LLC is seeking a seasoned Information Security professional to lead responses to client security assessments, questionnaires, and audits, and to document evidence and risk findings. You will create and maintain security policies, standards, guidelines, and supporting documentation while guiding IT risk, compliance, and governance across the organization.

The role also oversees vendor risk management, security exceptions, and the Security Awareness program, requiring clear