Remote Cybersecurity Analyst — GRC & Risk Management

System One; Owings Mills (MD); On-site; USD 165,312,000 - 192,864,000; Full time

Job summary

System One is seeking a Cybersecurity Analyst (GRC) for a fully remote role. The position focuses on risk assessments, governance, and strengthening security controls across the enterprise.

The ideal candidate has 3+ years in cybersecurity, experience with GRC, IT auditing, and ServiceNow, and holds a Bachelor's degree in a related field. Healthcare compliance cadence and strong communication are valued.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• 3+ years of cybersecurity experience.
• Experience with Cybersecurity Risk Assessments, Governance, Risk & Compliance (GRC), ServiceNow, Databases, and IT Audit processes.
• Strong understanding of cybersecurity frameworks, risk management practices, and industry regulations.

Responsibilities

• Conduct cybersecurity risk assessments and recommend remediation strategies.
• Develop and enhance organization-wide security policies, standards, and best practices.
• Research emerging cybersecurity threats, vulnerabilities, and industry trends, providing recommendations to leadership.
• Plan, implement, and support layered security controls to protect organizational assets.
• Collaborate with IT, audit, and business teams to ensure compliance with security and regulatory requirements.
• Utilize ServiceNow and other tools to support security operations, governance, and compliance activities.
• Maintain cybersecurity documentation and reporting.

Skills

Cybersecurity risk assessments

GRC

IT Audit

Communication

Education

Bachelor's degree in Computer Science, Information Technology, or a related field

Tools

ServiceNow

Databases

Microsoft Office

Job description

System One is seeking a Cybersecurity Analyst (GRC) for a fully remote role. The position focuses on risk assessments, governance, and strengthening security controls across the enterprise.

The ideal candidate has 3+ years in cybersecurity, experience with GRC, IT auditing, and ServiceNow, and holds a Bachelor's degree in a related field. Healthcare compliance cadence and strong communication are valued.