Senior Cyber GRC & Risk Analyst

FINRA; Rockville (MD); Hybrid; USD 112,000 - 203,000; Full time

Benefits offered by this job

Health insurance

Paid time off

Volunteer service days

Job summary

FINRA is seeking a Senior Security Analyst to support IT Risk Management and Governance &Compliance across enterprise cybersecurity initiatives. You will draft policy and baseline security controls, manage risk registers, coordinate audits, and lead vulnerability management with cross-functional teams.

Ideal candidates have 7+ years in IT security, 3+ years with AWS-based controls, and hands-on RMF experience across the system lifecycle.

Qualifications

• Bachelor’s degree in Computer Science, Engineering, Cybersecurity, or related field, or equivalent experience.
• 7+ years designing, operating, and monitoring IT systems with cybersecurity focus.
• 3+ years designing AWS-based security controls.
• Experience applying NIST RMF across full system lifecycle.

Responsibilities

• Create and maintain cybersecurity policies, procedures, and standards documentation.
• Maintain enterprise risk registers and provide regular risk reporting to stakeholders.
• Develop risk treatment strategies and control implementation roadmaps.
• Perform IT/cyber risk assessments across enterprise using NIST methodologies.
• Develop, update, and maintain System Security Plans (SSPs).
• Coordinate audits, assessments, and regulatory examinations with cross-functional teams.
• Manage end-to-end vulnerability management, triage, remediation, and metrics.
• Support authorization packages and continuous monitoring to maintain ATO.

Skills

Cybersecurity governance

Risk assessment

NIST RMF

GRC tools

Education

Bachelor’s degree in CS/Engineering/Cybersecurity

Tools

AWS

GRC platform

Job description

FINRA is seeking a Senior Security Analyst to support IT Risk Management and Governance &Compliance across enterprise cybersecurity initiatives. You will draft policy and baseline security controls, manage risk registers, coordinate audits, and lead vulnerability management with cross-functional teams.

Ideal candidates have 7+ years in IT security, 3+ years with AWS-based controls, and hands-on RMF experience across the system lifecycle.