Senior Cybersecurity GRC Analyst - ISO/NIST Controls (Hybrid)

INSPYR Solutions; Houston (TX); Hybrid; USD 110,000 - 150,000; Full time

Job summary

INSPYR Solutions is seeking a Senior Cybersecurity Compliance Analyst to lead the design, implementation and assessment of enterprise cybersecurity controls and GRC programs. You will coordinate with auditors, IT, legal, and stakeholders to strengthen security posture while ensuring regulatory compliance.

In this role you will guide control owners, mentor junior staff, and align cybersecurity with business objectives, balancing security with operational needs in a hybrid work environment.

Qualifications

• Bachelor-level degree in a relevant field and 6+ years in cybersecurity, risk, compliance, or audit.
• Experience managing security certification programs, controls design/implementation, and audits end-to-end.
• Deep knowledge of ISO, NIST, SOC, COBIT frameworks.
• Strong stakeholder management, reporting, and communication skills.
• Ability to independently manage multiple initiatives and travel occasionally.

Responsibilities

• Lead design, implementation, assessment, and improvement of enterprise cybersecurity controls and IT controls.
• Coordinate security certifications and attestations (e.g., ISO 27001) with auditors and stakeholders.
• Monitor ongoing compliance with certification requirements and audits; track regulatory changes.
• Provide risk-based recommendations and guidance to control owners and leadership.
• Mentor junior analysts and align cybersecurity with business objectives.

Skills

Cybersecurity controls

Security architecture concepts

Compliance language translation

Stakeholder collaboration

Communication & documentation

Attention to detail

Independent work

GRC dashboards & reporting

Education

BA/BS in Information Security, Computer Science, Information Systems or related field

Tools

AuditBoard (Optro)

Up Guard

ServiceNow

AI tools

Job description

INSPYR Solutions is seeking a Senior Cybersecurity Compliance Analyst to lead the design, implementation and assessment of enterprise cybersecurity controls and GRC programs. You will coordinate with auditors, IT, legal, and stakeholders to strengthen security posture while ensuring regulatory compliance.

In this role you will guide control owners, mentor junior staff, and align cybersecurity with business objectives, balancing security with operational needs in a hybrid work environment.