Senior Cyber GRC Analyst — Governance & Risk Leader

H.I.G. Capital; Coral Gables (FL); On-site; USD 95,000 - 125,000; Full time

Job summary

H.I.G. Capital in Florida seeks a Senior Cyber GRC Analyst to strengthen governance, risk, and compliance across the information security program. You will partner with technology, risk, and business teams to identify, assess, and remediate cyber risks.

You will support audits, control documentation, and policy development while advancing frameworks such as NIST, ISO 27001, and CIS Controls. Strong communication and project-management skills are essential.

Qualifications

• Knowledge of information security principles and control frameworks.
• Familiarity with NIST, ISO 27001, CIS Controls.
• Experience with governance, risk management, compliance, or third-party risk.
• Strong analytical and problem-solving abilities.
• Excellent written and verbal communication.
• Ability to manage multiple tasks and deadlines.

Responsibilities

• Support the firm's GRC program by evaluating and enhancing security controls, policies, standards, procedures, and guidelines.
• Align Information Security Program with frameworks and regulatory expectations; map controls, identify gaps, and propose improvements.
• Develop and maintain cybersecurity policies, standards, and governance docs to address evolving threats and requirements.
• Assist internal and external audits by coordinating documentation, collecting evidence, and ensuring timely artifacts.
• Participate in quarterly access reviews, control validation activities, and other governance processes.

Skills

Information security

Governance, Risk, and Compliance

Regulatory compliance

Third‑party risk management

Analytical thinking

Communication skills

Technical writing

Education

Bachelor's degree or equivalent experience

Tools

GRC platforms

Job description

H.I.G. Capital in Florida seeks a Senior Cyber GRC Analyst to strengthen governance, risk, and compliance across the information security program. You will partner with technology, risk, and business teams to identify, assess, and remediate cyber risks.

You will support audits, control documentation, and policy development while advancing frameworks such as NIST, ISO 27001, and CIS Controls. Strong communication and project-management skills are essential.