Remote Senior Cyber GRC Analyst — Risk & Compliance Lead

SAIC; Texas; Remote; USD 100,000 - 140,000; Full time

Job summary

SAIC seeks a remote Senior Cyber GRC Analyst to join our Security Operations team supporting a major state and local government customer in Texas. You will drive risk analysis, threat modeling, policy development and compliance across data center and cloud environments.

The role emphasizes RMF, NIST SP800-53r4, vulnerability management, audits, and executive reporting, delivering governance insights and risk-based guidance for ongoing security programs.

Qualifications

• Bachelor's degree and five (5) years related experience; OR, Master’s Degree and three (3) years of experience in a related discipline (e.g. Information Security)
• 3-5 years of experience with cyber risk management including the NIST RMF and SP800-53R4
• 3-5 years of experience with cyber vulnerability and/or risk management
• 3-5 years of experience providing and coordinating cyber security assessments and audits
• Cybersecurity certification (CISSP or CRISC preferred; alternatives include CompTIA Security+, CEH, CISA, CISM, GSLC)
• Experience with the development and documentation of cybersecurity policies and standards
• Cyber security in data center and cloud environments
• Ability to create reports and visualizations to support Risk & Compliance activities

Responsibilities

• Using RMF and NIST guidance, perform risk analysis and track risks throughout their lifecycle
• Perform threat modeling and assessment
• Analyze vulnerability data from scanning tools and cyber intelligence to assess impact
• Coordinate audits including SOC II Type 2 (external)
• Design and coordinate security controls per NIST SP800-53 r4
• Oversee system security plans and ensure policy compliance
• Interact with peer suppliers to assess risk for their systems
• Maintain POAMs and supervise task completion
• Conduct baseline cybersecurity compliance assessments
• Ensure SAIC systems are patched per schedule
• Provide input on new risks and recommended actions
• Coordinate annual cybersecurity assessments across vendors
• Provide reports and executive briefings on activities and posture
• Coordinate business continuity and disaster recovery activities
• Maintain policy, procedures, and job aids

Skills

Risk management

Threat modeling

Vulnerability analysis

Audit coordination

Policy development

System security plans

Risk reporting

Stakeholder communication

Education

Bachelor's degree in related discipline

Master's degree in related discipline

Tools

Tenable

Qualys

ServiceNow

ITIL

Job description

SAIC seeks a remote Senior Cyber GRC Analyst to join our Security Operations team supporting a major state and local government customer in Texas. You will drive risk analysis, threat modeling, policy development and compliance across data center and cloud environments.

The role emphasizes RMF, NIST SP800-53r4, vulnerability management, audits, and executive reporting, delivering governance insights and risk-based guidance for ongoing security programs.