Senior GRC Cybersecurity Analyst — Hybrid

NRECA International; United States; Hybrid; USD 130,000 - 190,000; Full time

Benefits offered by this job

Hybrid schedule

Work from home option

Job summary

NRECA International seeks a Senior Cybersecurity GRC Lead to guide risk management, compliance, and governance across cloud, on‑prem, and third‑party environments. You will partner with IT and business units to identify, assess, and remediate cybersecurity risks, aligning with frameworks and regulatory requirements.

This role supports a hybrid work schedule in the United States, facilitating monthly risk reporting, policy development, and interaction with regulators and auditors.

Qualifications

• Bachelor's in Computer Science, MIS, Information Security, or related field.
• 7+ years of IT and information security risk management, compliance, audit, and governance.
• 7+ years leading and conducting information security risk assessments, control audits, and third-party security risk assessments.
• Strong knowledge of AWS, Azure, and M365.
• Experience with NIST CSF, RMF, 800-30, 800-53, 800-171, HIPAA, SOC2, CIS, ISO 27001/27002, COBIT.
• Experience with GRC tools, reports and dashboards development, and compliance automation.

Responsibilities

• Identify, assess, and prioritize cybersecurity risks for IT and business units with regulatory alignment.
• Develop and maintain risk registers, metrics, and governance policies.
• Manage compliance and issue tracking, coordinating with regulators and auditors; test control design.
• Analyze findings to identify vulnerabilities and strengthen controls.
• Govern risk governance and report conformance to framework.
• Lead monthly security risk meetings reporting metrics and risks.
• Improve risk governance framework and guide stakeholders.
• Develop third‑party risk policies and annual assessment plan.

Skills

IT & information security risk mgmt

Compliance & audit

Risk assessments & third‑party risk

Cloud security (AWS/Azure/M365)

GRC frameworks & standards (NIST CSF,

Education

Bachelor's in Computer Science, MIS, Information Security, or related field

Tools

GRC tools & dashboards

Job description

NRECA International seeks a Senior Cybersecurity GRC Lead to guide risk management, compliance, and governance across cloud, on‑prem, and third‑party environments. You will partner with IT and business units to identify, assess, and remediate cybersecurity risks, aligning with frameworks and regulatory requirements.

This role supports a hybrid work schedule in the United States, facilitating monthly risk reporting, policy development, and interaction with regulators and auditors.