Remote Security GRC Analyst: Risk & Compliance Lead

NEPSE Trading; United States; On-site; USD 70,000 - 77,000; Full time

Benefits offered by this job

Health insurance

401(k) plan with company match

Pension plan

Paid time off

Job summary

Protective is seeking a Security GRC Analyst in the United States to support the information security risk management program. You will execute regulatory compliance, third-party risk, and security awareness programs under leadership guidance.

This role focuses on applying frameworks like NIST CSF and SOC 2, collaborating with compliance, legal, and technology teams to ensure policy adherence and continuous improvement. Strong communication and analytical skills are essential.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Systems, or related field.
• 1–3 years of experience in GRC, risk management, or compliance within cybersecurity.
• Familiarity with regulatory frameworks, audit processes, and control environments.
• Experience with third-party/vendor risk management (TPRM).
• Proficient with tools like ServiceNow, Archer, SharePoint, and Power BI.

Responsibilities

• Perform enterprise risk assessments using NIST CSF, NIST 800-53, SOC 2, CIS.
• Analyze vulnerability reports to aid remediation and risk reduction.
• Develop and deliver security awareness programs and training.
• Create reports and dashboards for leadership on risk posture and program maturity.
• Conduct end-to-end third-party risk assessments and vendor lifecycle checks.
• Support governance by maintaining policies, standards, and control libraries.

Skills

GRC / risk management

Regulatory frameworks knowledge

Strong communication

Agile / project tracking

Education

Bachelor’s degree in Cybersecurity / Information Systems

Tools

ServiceNow

Archer

SharePoint

Power BI

UpGuard

Job description

Protective is seeking a Security GRC Analyst in the United States to support the information security risk management program. You will execute regulatory compliance, third-party risk, and security awareness programs under leadership guidance.

This role focuses on applying frameworks like NIST CSF and SOC 2, collaborating with compliance, legal, and technology teams to ensure policy adherence and continuous improvement. Strong communication and analytical skills are essential.