Remote Senior Cybersecurity GRC Analyst - Risk & Compliance

SAIC; Yorktown (VA); Remoto; USD 110.000 - 160.000; Tempo integral

Resumo da vaga

SAIC is seeking a Cybersecurity GRC Senior Analyst to join the Governance, Risk and Compliance (GRC) Team. This role may be remote anywhere in the United States and focuses on enterprise cyber risk management, control validation, and continuous improvement of the Cybersecurity Risk Management Program.

Responsibilities include leading risk assessments, coordinating remediation, and supporting audits. The role requires strong communication, stakeholder collaboration, and knowledge of frameworks

Qualificações

• Bachelor’s degree in Information Technology or similar discipline plus 5 years of experience, or Master’s degree with 3 years of experience.
• Certifications such as CISA, CISSP, CISM, or Security+.
• Experience with cybersecurity frameworks/regulations (NIST RMF, NIST SP 800-53/171, ISO/IEC 27001, COBIT, COSO).

Responsabilidades

• Maintain awareness of cybersecurity trends to inform risk mitigation.
• Lead application, system, and vendor risk assessments and document results.
• Coordinate remediation through mitigation plans and support remediation closure.
• Conduct third‑party risk assessments with procurement, legal, and owners.
• Assess supply chain risk and compliance; perform risk management activities.
• Validate security controls per NIST SP 800‑171 and monitor its effectiveness.
• Manage vulnerability and pen test findings; coordinate remediation with owners.
• Support audits (ISO/IEC 27001, SOC reports) and prepare audit evidence.
• Develop policies/standards and provide training to stakeholders.
• Assist with GRC tooling configuration (ServiceNow GRC) for evidence and reporting.
• Elevate material risks to senior leadership with clear risk statements.

Conhecimentos

Cybersecurity frameworks

Risk assessment

Vendor risk management

Regulatory compliance

Security controls

Communication

Formação

Bachelor's degree in IT or related

Master's degree

Certifications: CISA/CISSP/CISM/Security+

Ferramentas

ServiceNow GRC

Descrição da vaga

SAIC is seeking a Cybersecurity GRC Senior Analyst to join the Governance, Risk and Compliance (GRC) Team. This role may be remote anywhere in the United States and focuses on enterprise cyber risk management, control validation, and continuous improvement of the Cybersecurity Risk Management Program.

Responsibilities include leading risk assessments, coordinating remediation, and supporting audits. The role requires strong communication, stakeholder collaboration, and knowledge of frameworks