Senior GRC & IT Security Analyst

My3tech-Inc; Richmond (VA); Presencial; USD 90 000 - 130 000; Tempo integral

Resumo da oferta

My3tech-Inc seeks a seasoned GRC professional to oversee security risk assessments, regulatory compliance, and executive reporting. You will apply NIST SP 800-53, review risk controls, and coordinate with auditors and business units to strengthen governance and security posture.

Responsibilities include creating security documentation, coordinating incident response, and delivering metrics and executive summaries to leadership. Experience with Archer GRC is a plus.

Qualificações

• 5+ years of experience performing security risk assessments, compliance reviews, or GRC activities.
• 3+ years applying NIST security frameworks, including NIST SP 800-53.
• 4+ years conducting security control assessments and supporting IT audits.
• 3+ years maintaining risk registers, documenting findings, and tracking corrective actions.

Responsabilidades

• Develop and maintain security documentation, policies, procedures, assessment reports, and executive summaries.
• Support incident response, disaster recovery, or business continuity governance.
• Prepare security metrics, compliance reports, risk summaries, and management briefings.
• Review vendor security documentation, SOC reports, and security questionnaires.

Conhecimentos

Security risk assessments

Regulatory compliance

GRC

Executive reporting

NIST SP 800-53

Ferramentas

Archer GRC

Descrição da oferta de emprego

My3tech-Inc seeks a seasoned GRC professional to oversee security risk assessments, regulatory compliance, and executive reporting. You will apply NIST SP 800-53, review risk controls, and coordinate with auditors and business units to strengthen governance and security posture.

Responsibilities include creating security documentation, coordinating incident response, and delivering metrics and executive summaries to leadership. Experience with Archer GRC is a plus.