Remote Senior Cyber GRC Analyst - RMF & Vulnerability Risk

SAIC; Texas; Remote; USD 110,000 - 160,000; Full time

Job summary

SAIC is seeking a remote Senior Cyber GRC Analyst to join our team supporting a state & local government customer in Texas. You will apply RMF, assess risks, and coordinate cyber risk management across vendors.

Responsibilities include vulnerability management, policy development, security controls, and executive reporting. A Bachelor's degree and 3–5 years of related experience are typical; CISSP or CRISC preferred.

Qualifications

• Bachelor’s Degree in related discipline and five years of information security experience.
• 3–5 years of experience with cyber risk management including the NIST RMF and SP800-53R4.
• 3–5 years of experience with cyber vulnerability and/or risk management.
• 3–5 years of experience providing and coordinating cyber security assessments and audits.
• CISSP or CRISC preferred; experience with developing and documenting cybersecurity policies and standards.
• Experience with Vulnerability Management & Compliance scanning tools such as Tenable or Qualys.
• Experience with ITSM/Reporting tools such as ServiceNow.

Responsibilities

• Analyze and assess vulnerability data from scanning tools, cyber intelligence or other resources to determine validity, severity and impact.
• Design and coordinate implementation of cyber security controls using NIST SP800-53R4 with technical teams.
• Coordinate and oversee development of system security plans and policy compliance.
• Interact with peer suppliers to assess risk for their systems and coordinate risk management activities.
• Perform baseline assessments of cybersecurity compliance against standards and requirements.
• Help ensure SAIC and in-scope systems are patched according to schedule.
• Provide input on new risks and recommended actions.
• Coordinate annual cybersecurity assessments across multiple vendors and provide executive briefings.

Skills

Cyber risk management

Vulnerability management

Threat intelligence

Policy establishment

Risk analysis

Security planning

Education

Bachelor’s degree in related discipline

Tools

Tenable

Qualys

ServiceNow

Job description

SAIC is seeking a remote Senior Cyber GRC Analyst to join our team supporting a state & local government customer in Texas. You will apply RMF, assess risks, and coordinate cyber risk management across vendors.

Responsibilities include vulnerability management, policy development, security controls, and executive reporting. A Bachelor's degree and 3–5 years of related experience are typical; CISSP or CRISC preferred.