Senior GRC & Security Operations Analyst

PBS; Alexandria (VA); On-site; USD 155,000 - 165,000; Full time

Benefits offered by this job

Discretionary bonuses

Insurance options

Paid time off

Job summary

PBS is seeking a Security Analyst II to mature PBS’s governance, risk, and compliance programs, including risk management, policy development, GRC tooling, and AI governance, while providing hands-on security operations support across cloud and on-prem environments.

The role is ~75% GRC program development and ~25% security operations, including incident response and threat detection, with ongoing continuity planning and audits.

Qualifications

• 10+ years in cybersecurity and/or information technology
• 5+ years in cybersecurity GRC (risk management, compliance, policy and governance)
• 4+ years as a security analyst
• 3+ years as a systems engineer or administrator

Responsibilities

• Governance, Risk & Compliance: Build and operate enterprise cyber risk management according to NIST SP 800-53 Rev 5
• Vulnerability management: coverage, prioritization, remediation tracking, metrics
• Develop and maintain cybersecurity policies, standards, and procedures across PBS
• Configure and administer GRC tooling and integrations across security and IT platforms
• Design automation to streamline GRC workflows and evidence collection
• Support AI governance, secure deployment and testing per NIST AI RMF
• Develop business continuity and disaster recovery plans and tabletop exercises
• Support audits and compliance activities with evidence gathering
• Security Operations: monitor systems for cybersecurity events and confirm protection effectiveness
• Lead incident response, containment, and recovery with internal and MSSP teams
• Incorporate lessons learned to improve detection and response
• Advise on AI-driven security operations and processes
• Coordinate with stakeholders to ensure PBS mission support

Skills

GRC program design

Risk assessment

Policy development

Automation of workflows

AI governance

Incident response

Education

Bachelor's degree in cybersecurity or related field

CISSP or equivalent preferred

Tools

GRC platforms (ServiceNow GRC/IRM)

SIEM

GRC tooling integration

Job description

PBS is seeking a Security Analyst II to mature PBS’s governance, risk, and compliance programs, including risk management, policy development, GRC tooling, and AI governance, while providing hands-on security operations support across cloud and on-prem environments.

The role is ~75% GRC program development and ~25% security operations, including incident response and threat detection, with ongoing continuity planning and audits.