Senior GRC & Security Operations Analyst

GP Strategies; United States; Remote; USD 120,000 - 160,000; Full time

Job summary

GP Strategies is seeking a hands-on Senior Security Analyst to bridge security operations and governance, risk, and compliance. The role focuses on telemetry, eDiscovery, third-party risk vetting, and patch remediation rather than strategy meetings.

The candidate will be the technical anchor for day-to-day security alerts, endpoint hygiene, and cloud posture, owning data governance workflows across Microsoft 365 and Google Workspace environments.

Qualifications

• Bachelors degree in Computer Science, Cybersecurity, IT, or equivalent hands-on experience.
• 5+ years of hands-on security admin, incident response, and technical GRC operations.
• Direct experience using Microsoft Purview and Google Workspace Vault for data holds and exports.
• Proficiency with Defender XDR (or similar) and log analysis.
• Hands-on experience with Tenable.io, Intune, and endpoint management solutions.
• Familiarity with Azure security controls and CIS Benchmarks.
• Ability to evaluate SaaS vendor security posture and risk.

Responsibilities

• Direct and manage data governance, eDiscovery, and GRC workflows for legal holds and audits.
• Monitor security alerts across Defender XDR, endpoints, identities, and cloud workloads.
• Oversee vulnerability management and remediation with IT teams.
• Audit Azure/AWS configurations against CIS Benchmarks and internal standards.
• Develop automated playbooks to streamline alert triage and routine tasks.

Skills

Security operations

GRC operations

eDiscovery

Incident response

Vulnerability management

Cloud security

Endpoint management

SIEM/XDR

Education

Bachelor's degree in CS/Cybersecurity/IT

Tools

Microsoft Purview

Google Workspace Vault

Tenable.io

Microsoft Intune

KACE SMA

Azure security controls

Job description

GP Strategies is seeking a hands-on Senior Security Analyst to bridge security operations and governance, risk, and compliance. The role focuses on telemetry, eDiscovery, third-party risk vetting, and patch remediation rather than strategy meetings.

The candidate will be the technical anchor for day-to-day security alerts, endpoint hygiene, and cloud posture, owning data governance workflows across Microsoft 365 and Google Workspace environments.