Onsite Information Security & GRC Analyst

Quantam; Frankfort (KY); On-site; USD 55,000 - 96,000; Full time

Benefits offered by this job

Health benefits

401(k) plan

Paid time off

Onsite in Frankfort

Job summary

Quantam Solutions is seeking an Information Security GRC Analyst to support technology, information security, governance, risk, and compliance (GRC) and driver licensing operations. This onsite role in Frankfort, KY requires residency and ability to commute within Kentucky.

The successful candidate will assist with security control assessments, risk analyses, policy updates, and continuous monitoring, coordinating with IT staff, vendors, and management to strengthen security posture and

Qualifications

• Bachelor's Degree preferred; substitute experience allowed as applicable.
• Experience with information security governance, risk, and compliance.

Responsibilities

• Support information security and GRC activities for the client.
• Develop and maintain security policies, procedures, and compliance documentation.
• Assist with NIST SP 800-53 controls and related implementation.
• Document control effectiveness and participate in risk assessments.
• Develop and maintain System Security Plans (SSPs) and POA&Ms.
• Support continuous monitoring, audits, and evidence management.
• Collect and organize evidence to demonstrate regulatory compliance.
• Coordinate with stakeholders to obtain required security documentation.

Skills

Information Security

GRC

Risk Assessment

Policy Development

Security Controls

SSP

POA&M

Audit & Evidence

PII Protection

Cloud Security

Hybrid Controls

Education

Bachelor's Degree

Job description

Quantam Solutions is seeking an Information Security GRC Analyst to support technology, information security, governance, risk, and compliance (GRC) and driver licensing operations. This onsite role in Frankfort, KY requires residency and ability to commute within Kentucky.

The successful candidate will assist with security control assessments, risk analyses, policy updates, and continuous monitoring, coordinating with IT staff, vendors, and management to strengthen security posture and