Senior Cybersecurity GRC and Vendor Risk Auditor

Cybersecurity Jobs; New York (NY); On-site; USD 125,000 - 130,000; Full time

Job summary

Cybersecurity Jobs in Brooklyn, NY seeks a seasoned security and risk compliance analyst to conduct enterprise risk and compliance assessments across internal systems and vendors, translate findings into remediation actions, and support risk-based decision making.

The ideal candidate has 5+ years in GRC, familiarity with NIST SP 800-53/800-37, RMF and POA&M, and hands-on experience with Archer, ServiceNow, OneTrust, Power BI, and Excel; on-site role with annual salary 125k–130k.

Qualifications

• 5+ years of relevant experience.
• Expertise in GRC methodologies, security control auditing, and third-party risk assessments.
• Ability to interpret federal compliance mandates and evaluate controls including NIST SP 800-53 and NIST SP 800-37.
• Strong competency in Security Impact Analyses and POA&M documentation.
• Experience running security and compliance assessments across internal systems and third-party vendors.
• Experience evaluating external service provider security practices and supporting vendor risk management across the assessment lifecycle.
• Experience analyzing assessment results, documenting findings, and supporting remediation by tracking issues and prioritizing corrective actions.
• Experience working with business and technical stakeholders to clarify compliance requirements and resolve risks within accepted thresholds.
• Experience using risk management tools and reporting dashboards to maintain assessment documentation, track risk metrics, and support security posture reporting.
• Experience translating compliance requirements into actionable remediation tasks while maintaining organizational risk thresholds.
• Experience supporting daily RMF lifecycle control assessments, including evidence collection, walkthroughs, testing of technical and administrative controls, and POA&M tracking.

Responsibilities

• Conduct security and compliance assessments across internal systems and third-party vendors to support adherence to requirements.
• Assess external service provider security practices and support vendor risk management.
• Analyze results, document findings, and track remediation actions.
• Clarify compliance requirements with stakeholders and help resolve risks within thresholds.
• Use risk management tools and dashboards to maintain assessment docs and track risk metrics.
• Translate compliance requirements into remediation tasks while maintaining risk thresholds.
• Centralize assessment documentation using GRC platforms (Archer, ServiceNow) and Third-Party Risk tools (OneTrust, Prevalent).
• Convert findings into actionable insights with Power BI and Excel for reporting.
• Perform RMF lifecycle control assessments including evidence collection and POA&M tracking.
• Apply expertise in GRC methodologies and third-party risk assessments.

Skills

GRC methodologies

Security control auditing

Third-party risk assessments

NIST SP 800-53

POA&M management

RMF lifecycle

Stakeholder collaboration

Tools

Archer

ServiceNow

OneTrust

Prevalent

MS Excel

Power BI

MS Visio

JIRA

Microsoft Office

Job description

Cybersecurity Jobs in Brooklyn, NY seeks a seasoned security and risk compliance analyst to conduct enterprise risk and compliance assessments across internal systems and vendors, translate findings into remediation actions, and support risk-based decision making.

The ideal candidate has 5+ years in GRC, familiarity with NIST SP 800-53/800-37, RMF and POA&M, and hands-on experience with Archer, ServiceNow, OneTrust, Power BI, and Excel; on-site role with annual salary 125k–130k.