Remote Cyber Risk & Compliance Analyst

Jobgether; United States; Remote; USD 90,000 - 130,000; Full time

Benefits offered by this job

Fully remote (India)

Permanent full-time employment

Professional growth

Learning and development

Collaborative culture

International exposure

Purpose-driven work

Job summary

Jobgether is seeking an experienced cybersecurity governance, risk, and compliance professional to lead audits, vendor risk reviews, and BCP/DR initiatives across business functions. You will document findings, coordinate remediation, and report on ISMS progress.

Ideal candidates hold a bachelor's in engineering, 3+ years in GRC, familiarity with NIST CSF and ISO 27001, and certifications like CISA. This fully remote role offers international collaboration and growth in a purpose-driven energy

Qualifications

• A bachelor's degree in an engineering discipline.
• At least three years of professional experience in cybersecurity governance, risk, and compliance (GRC).
• Practical experience implementing security controls and processes across business functions aligned with NIST CSF and ISO 27001.
• Hands-on experience with security audits, third-party risk assessments, business continuity planning, and risk management.
• Familiarity with SOC 2, ISO 27001, GDPR, and DPDP frameworks.
• The ability to conduct structured risk assessments and coordinate remediation with multiple stakeholders.
• Strong written and verbal communication, with the ability to explain concepts to both technical and non-technical audiences.
• Proactive, organized, and capable of independent work in a remote environment.
• Preferred certifications: CISA, ISO 27001 Lead Implementer, or Lead Auditor.

Responsibilities

• Cybersecurity audits and assessments: Plan and conduct internal audits across applications, infrastructure, and processes.
• Vendor and third-party risk management: Review security questionnaires and contracts to mitigate risks.
• Business continuity and disaster recovery: Maintain and test BCP/DR plans with tabletop exercises.
• Cyber governance and compliance: Align policies with NIST CSF, ISO 27001, and regulatory requirements.
• Risk assessment and treatment: Maintain risk registers and prioritize mitigation strategies.
• Management reporting: Prepare dashboards on audit findings, exposure, and ISMS progress.
• Security awareness: Develop training on phishing, data handling, and role-specific security.
• Security communications: Create clear awareness materials and quick-reference guides.
• Continuous improvement: Identify opportunities to improve security controls and governance processes.

Skills

GRC experience

Analytical thinking

Written & verbal communication

Stakeholder management

Remote work capability

Structured risk assessments

Problem solving

Explain cybersecurity to non-technical

Education

Bachelor's degree in engineering

Job description

Jobgether is seeking an experienced cybersecurity governance, risk, and compliance professional to lead audits, vendor risk reviews, and BCP/DR initiatives across business functions. You will document findings, coordinate remediation, and report on ISMS progress.

Ideal candidates hold a bachelor's in engineering, 3+ years in GRC, familiarity with NIST CSF and ISO 27001, and certifications like CISA. This fully remote role offers international collaboration and growth in a purpose-driven energy