Remote Cyber GRC Analyst — Compliance & Awareness

Western National Mutual Insurance Co; Edina (MN); Hybrid; USD 66,300 - 114,290; Full time

Benefits offered by this job

Medical insurance options

401(k) plan with matching contributions

100% company-paid tuition reimbursement

Wellbeing program with onsite fitness

Paid parental leave

Job summary

Western National Mutual Insurance Co is looking for a Cybersecurity GRC Analyst to enhance its information security program. This role will focus on regulatory compliance and managing third-party security risk through various initiatives.

The ideal candidate has a background in governance, risk, and compliance with experience in cybersecurity frameworks. Offering competitive compensation, this position also emphasizes the importance of strong communication skills and continuous security awareness.

Qualifications

• Two-plus years of experience in GRC, cybersecurity, or security awareness roles.
• Strong understanding of security and regulatory frameworks, such as NIST CSF and CIS Controls.
• Experience conducting vendor security risk assessments and documenting remediation activities.

Responsibilities

• Maintain audit-ready documentation for regulatory compliance.
• Perform security risk assessments of third-party vendors.
• Design and execute the organization's security awareness training program.
• Track key risk indicators (KRIs) and key performance indicators (KPIs) for the information security program.

Skills

Governance, risk, and compliance (GRC)

Cybersecurity

Excellent organizational skills

Communication skills

Security awareness

Education

Bachelor's degree in communications, business, or related field

Tools

Microsoft Office (Excel, PowerPoint, Word)

GRC platforms (Drata, Vanta, OneTrust, Archer)

Job description

Western National Mutual Insurance Co is looking for a Cybersecurity GRC Analyst to enhance its information security program. This role will focus on regulatory compliance and managing third-party security risk through various initiatives.

The ideal candidate has a background in governance, risk, and compliance with experience in cybersecurity frameworks. Offering competitive compensation, this position also emphasizes the importance of strong communication skills and continuous security awareness.