Senior Cybersecurity & GRC Analyst - Growth & Impact

Conjointly; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

Conjointly is seeking a Senior Cybersecurity and GRC Analyst to protect our platform and drive governance, risk, and compliance work. You will lead hands-on cybersecurity activities and support SOC 2, ISO/IEC 27001, and ISO/IEC 27701 programs.

The role emphasizes vulnerability management, incident response, and clear risk communication to management, with opportunities to grow into security leadership within a collaborative team.

Qualifications

• Degree in Computer Science, IT, Cybersecurity or a related field, or equivalent experience.
• At least one cybersecurity certification (e.g., CISSP, CySA+, GIAC or cloud security cert).
• 5+ years of hands-on cybersecurity, security operations, vulnerability management or incident response.
• Strong knowledge of cloud, network, endpoint, identity and application security.
• Ability to explain risk clearly to non-technical staff and report to management.

Responsibilities

• Plan and coordinate cybersecurity activities across the business, aligning with best practices.
• Monitor, triage and respond to security alerts and incidents; maintain logs and reports.
• Conduct vulnerability scans, triage findings and work with developers on fixes.
• Oversee user access and privileged accounts; ensure timely removal of leavers’ access.
• Assist with SOC 2, ISO/IEC 27001 and ISO/IEC 27701 audits and security questionnaires.

Skills

Cybersecurity

Security operations

Vulnerability management

Incident response

Risk assessment

Communication to management

Security training

Education

Degree in Computer Science, IT, Cybersecurity or related field

Tools

AWS security services

SIEM

EDR

Vulnerability scanning tools

Endpoint management

Job description

Conjointly is seeking a Senior Cybersecurity and GRC Analyst to protect our platform and drive governance, risk, and compliance work. You will lead hands-on cybersecurity activities and support SOC 2, ISO/IEC 27001, and ISO/IEC 27701 programs.

The role emphasizes vulnerability management, incident response, and clear risk communication to management, with opportunities to grow into security leadership within a collaborative team.