Remote Cyber GRC Senior Analyst - Risk & Compliance

SAIC; United States; À distance; USD 110 000 - 150 000; Plein temps

Résumé du poste

SAIC is seeking a Cybersecurity GRC Senior Analyst to join the Governance, Risk and Compliance (GRC) Team. For the right candidate, this position may be remote anywhere in the United States.

The role supports enterprise cyber risk management by leading risk assessments, validating control effectiveness, coordinating remediation, and driving continuous improvement of the Cybersecurity Risk Management Program.

Qualifications

• Bachelor's degree in IT or related field with 5 years of experience, or master's with 3 years of experience
• Certifications such as CISA, CISSP, CISM, or Security+
• Strong knowledge of cybersecurity frameworks and regulations (NIST RMF, NIST SP 800-53/171, ISO/IEC 27001, COBIT, COSO, MITRE, ITIL, HITRUST, SOC)
• Ability to translate risk into business language for leadership and stakeholders

Responsabilités

• Maintain current awareness of cybersecurity trends to inform risk mitigation strategies
• Assist with application, system, and vendor risk assessments and document results
• Conduct third-party vendor risk assessments and coordinate remediation
• Conduct supply chain risk management risk and compliance assessments
• Assist with operational cyber activities and security controls per NIST SP 800-171
• Drive continuous monitoring and maintain dashboards and KRIs
• Manage vulnerability and penetration test findings and remediation SLAs
• Prepare audit evidence and participate in internal/external audits (ISO/IEC 27001, SOC reports)
• Recommend updates to policies, standards, and procedures based on gaps
• Develop and deliver training to stakeholders on risk awareness
• Assist with GRC tooling configuration and reporting
• Collaborate across security, IT, and business teams to elevate material risks to senior leadership

Connaissances

Analytical skills

Risk assessment

Written & verbal communication

Stakeholder collaboration

Strategic thinking

Project management

Formation

Bachelor's degree in Information Technology or related field

Master's degree

Outils

ServiceNow

GRC tools

Description du poste

SAIC is seeking a Cybersecurity GRC Senior Analyst to join the Governance, Risk and Compliance (GRC) Team. For the right candidate, this position may be remote anywhere in the United States.

The role supports enterprise cyber risk management by leading risk assessments, validating control effectiveness, coordinating remediation, and driving continuous improvement of the Cybersecurity Risk Management Program.