Remote Cyber Risk & GRC Analyst

Covenant HR LLC; United States; Sur place; USD 120 000 - 160 000; Temps partiel

Résumé du poste

Covenant HR LLC is recruiting for a contract cybersecurity risk professional for a leading global hospitality organization. The role focuses on cyber risk/GRC, TPRM, and risk governance, with a strong emphasis on reporting to executive audiences.

Fully remote within the United States, candidates should be comfortable working Eastern hours, with occasional travel or office attendance as needed. The engagement runs up to 2 years with potential for extension and a start around December 1.

Qualifications

• Approximately 5-7 years of cybersecurity experience with a strong foundation in cyber risk/GRC, including TPRM, cyber assessments, and/or risk governance.
• Hands-on experience reviewing policies, standards, ISO-related materials, third-party attestation reports, and other security documentation to assess and score risk using established methodologies.
• Commercial/private-sector cybersecurity risk experience and a practical understanding of risk management, balancing remediation with business needs and risk acceptance.
• Strong cross-functional communication skills with the ability to collaborate across business, IT, and cybersecurity teams while producing detail-oriented reporting for executive audiences.
• Self-directed and process-oriented with broad cybersecurity knowledge, strong research skills, and the ability to quickly understand unfamiliar technologies and solutions.

Responsabilités

• Perform business-impact assessments and final risk scoring based on findings identified through cybersecurity reviews.
• Track identified risks and issues within GRC processes and ensure risk-register information remains accurate and current.
• Review and assess security documentation, including policies, standards, third-party attestations, and ISO-related materials.
• Support third-party risk management activities and provide coverage across the TPRM process as needed.
• Conduct bespoke and ad-hoc risk analyses across technologies, solutions, and business initiatives.
• Partner with business, IT, cybersecurity, and other stakeholders to understand identified issues and determine their business-risk implications.
• Maintain high-quality, accurate risk reports and ensure deliverables are aligned for audiences that may include executive leadership.
• Manage follow-up activities for identified risks and issues through established governance processes.
• Independently research unfamiliar technologies and solutions to develop sufficient context for effective risk assessments.
• Manage multiple competing priorities while operating effectively in a process-driven, highly autonomous environment.
• Work as part of a small cyber risk team where initiative, accountability, adaptability, and the ability to work independently are essential.
• Target start date is December 1 to support transition and knowledge transfer with the outgoing contractor.

Connaissances

Cyber risk/GRC

TPRM

Policy review & risk scoring

Cross-functional communication

Self-directed, research skills

Description du poste

Covenant HR LLC is recruiting for a contract cybersecurity risk professional for a leading global hospitality organization. The role focuses on cyber risk/GRC, TPRM, and risk governance, with a strong emphasis on reporting to executive audiences.

Fully remote within the United States, candidates should be comfortable working Eastern hours, with occasional travel or office attendance as needed. The engagement runs up to 2 years with potential for extension and a start around December 1.