Remote Senior Cyber GRC Analyst – RMF & Risk Management

SAIC; United States; Remote; USD 120.000 - 170.000; Vollzeit

Zusammenfassung

SAIC is seeking a remote Senior Cyber GRC Analyst to join our Security Operations Services for a major state and local government customer in Texas. The role focuses on cyber risk management, vulnerability assessment, and policy development, with responsibility for security planning and oversight of data center and cloud services.

The candidate will perform RMF-based risk analysis, threat modeling, control implementation, and audits coordination, reporting to the Technical Director.

Qualifikationen

• Bachelor's Degree in related discipline with five years of related experience; OR, Master's Degree with three years in a related discipline (e.g. Information Security).
• 3-5 years of experience with cyber risk management including the NIST RMF and SP800-53R4.
• 3-5 years of experience with cyber vulnerability and/or risk management; coordination of cyber security assessments and audits.

Aufgaben

• Perform risk analysis using RMF and guidance; identify risks, mitigations, and track through lifecycle.
• Conduct threat modeling and assessments.
• Analyze vulnerability data to determine validity, severity and impact on SAIC customers.
• Coordinate audits (SOC II Type 2) with internal and external parties.
• Design and coordinate implementation of cyber security controls with technical teams.
• Oversee system security plans and policy compliance.
• Interact with peer suppliers to assess risk across systems and technologies.
• Maintain POAMs and oversee task completion by others.
• Baseline cybersecurity compliance assessments against standards.
• Ensure patching per approved schedule and requirements.
• Provide input on new risks and recommended actions.
• Coordinate annual cybersecurity assessments; produce consolidated reports.
• Provide management-level reports and executive briefings.

Kenntnisse

NIST RMF

Risk assessment

Threat modeling

Vulnerability management

Audit coordination

Ausbildung

Bachelor's Degree in related discipline

Master's Degree in related discipline

Jobbeschreibung

SAIC is seeking a remote Senior Cyber GRC Analyst to join our Security Operations Services for a major state and local government customer in Texas. The role focuses on cyber risk management, vulnerability assessment, and policy development, with responsibility for security planning and oversight of data center and cloud services.

The candidate will perform RMF-based risk analysis, threat modeling, control implementation, and audits coordination, reporting to the Technical Director.