Senior Cyber GRC Analyst - Policy, Risk & Compliance

Financial Industry Regulatory Authority, Inc.; Rockville (MD); Híbrido; USD 112 000 - 203 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Health insurance

401(k) plan with company match

Paid time off & holidays

Resumo da oferta

FINRA is seeking a Senior Security Analyst to support IT risk management, governance, and cybersecurity initiatives across enterprise systems. You will balance strategic risk with tactical compliance execution.

Responsibilities include maintaining risk registers, developing remediation roadmaps, preparing SSPs, coordinating audits, and leading vulnerability management programs in a hybrid work environment. A bachelor’s degree and 7+ years of experience are preferred.

Qualificações

• Seven years of professional IT security experience with emphasis on cybersecurity.
• Experience designing, operating, monitoring security controls for cloud systems.
• RMF framework experience across full system lifecycle per NIST 800-37.

Responsabilidades

• Develop and maintain cybersecurity policies, procedures, and standards.
• Maintain enterprise risk registers and provide risk reporting to leadership.
• Develop risk treatment roadmaps and remediation plans for technical teams.
• Prepare SSPs and support audits and regulatory examinations.
• Oversee end-to-end vulnerability management and remediation tracking.
• Support ATO processes and continuous monitoring activities.

Conhecimentos

IT risk management

Governance & compliance

NIST RMF

AWS security

risk assessment

Formação académica

Bachelor's degree in Computer Science / Cybersecurity

Ferramentas

GRC platform

Vulnerability scanners

Threat modeling tools

Descrição da oferta de emprego

FINRA is seeking a Senior Security Analyst to support IT risk management, governance, and cybersecurity initiatives across enterprise systems. You will balance strategic risk with tactical compliance execution.

Responsibilities include maintaining risk registers, developing remediation roadmaps, preparing SSPs, coordinating audits, and leading vulnerability management programs in a hybrid work environment. A bachelor’s degree and 7+ years of experience are preferred.