Senior Cyber GRC Analyst — Governance & Risk

H.I.G. Capital; Coral Gables (FL); On-site; USD 120,000 - 170,000; Full time

Job summary

H.I.G. Capital is seeking a Senior Cyber Governance, Risk, and Compliance (GRC) Analyst to strengthen the organization’s security governance, risk management, and compliance initiatives.

The role collaborates with technology, risk, and business teams to assess risk, align controls with frameworks, and support risk remediation. Strong communication and project coordination are essential for success.

Qualifications

• Bachelor's degree in Information Security, Cybersecurity, Computer Science, MIS, Engineering, or related technical discipline, or a high school diploma with equivalent professional experience.
• Familiarity with NIST, ISO 27001, CIS Controls, or similar frameworks.
• Experience in governance, regulatory compliance, risk assessments, third‑party risk management, or security program operations.

Responsibilities

• Support and enhance the firm's Cyber GRC program by developing and maintaining policies, standards, procedures, and guidelines.
• Map controls to recognized frameworks and regulatory expectations, identifying gaps and recommending improvements.
• Assist in audits by coordinating documentation requests and collecting control evidence.
• Perform third-party risk management activities and producer risk evaluations for vendors.
• Prepare cyber risk reporting and metrics for leadership and stakeholders.

Skills

Information Security

Governance

Risk Management

Compliance

Security Frameworks

Communication

Collaboration

Attention to Detail

Education

Bachelor's degree in Information Security, Cybersecurity, Computer Science, MIS, Engineering (or related)

Job description

H.I.G. Capital is seeking a Senior Cyber Governance, Risk, and Compliance (GRC) Analyst to strengthen the organization’s security governance, risk management, and compliance initiatives.

The role collaborates with technology, risk, and business teams to assess risk, align controls with frameworks, and support risk remediation. Strong communication and project coordination are essential for success.