Remote Senior Cyber Risk & GRC Strategist

SAIC; Austin (TX); Remote; USD 110,000 - 160,000; Full time

Job summary

SAIC is seeking a remote Senior Cyber GRC Analyst to support Security Operations Services for a state and local government customer in Texas. You will work on cyber risk management, vulnerability management, threat intelligence, and policy standards, coordinating with technical teams and suppliers.

The role reports to the Technical Director and involves security planning, management, and oversight for data center and cloud services, with a focus on risk analysis, control implementation, and

Qualifications

• Bachelor’s degree in a related discipline with 5 years of experience in information security.
• Experience with the NIST RMF and SP 800-53 R4.
• Experience with vulnerability and risk management and conducting security assessments.

Responsibilities

• Perform risk analysis using RMF and guidance; identify mitigations and track risks through their lifecycle.
• Analyze vulnerability data from scans and intel to determine severity and impact for SAIC customers.
• Design and coordinate cyber security controls using NIST SP 800-53 r4 with technical teams.
• Coordinate development of system security plans and ensure compliance with standards and policies.
• Coordinate risk assessment activities with peer suppliers and manage remediation actions.
• Lead annual cybersecurity assessments across vendors and provide senior management briefings.

Skills

Cyber risk management

Vulnerability management

NIST RMF

Policy development

Threat intelligence

Security reporting

ServiceNow

Education

Bachelor’s Degree in Information Security or related

Tools

Tenable

Qualys

ServiceNow

Job description

SAIC is seeking a remote Senior Cyber GRC Analyst to support Security Operations Services for a state and local government customer in Texas. You will work on cyber risk management, vulnerability management, threat intelligence, and policy standards, coordinating with technical teams and suppliers.

The role reports to the Technical Director and involves security planning, management, and oversight for data center and cloud services, with a focus on risk analysis, control implementation, and