Sr. Security Engineer/Analyst (GRC)

Insight Global; United States; Hybrid; USD 120,000 - 160,000; Full time

Job summary

Insight Global is seeking a Sr. Security Analyst or Security Engineer for a hybrid remote role. The first 30 days will be onsite to acclimate as the team covers governance, risk, compliance, and security operations.

The candidate should excel at policy writing, risk documentation, and communicating security issues to stakeholders. Experience with third-party vendor reviews, risk assessments, patch and vulnerability management is required.

Qualifications

• 4+ years as a Sr. Security Analyst or Security Engineer in enterprise environments.
• 3+ years in Governance, Risk, and Compliance (GRC).
• Experience with 3rd party vendor reviews, risk assessments, patch management.
• Strong writing skills to document policies and risk.
• Experience with XDR/MDR, cloud or application security.

Responsibilities

• Lead governance, risk, and compliance activities while handling security operations.
• Review vendor security posture and coordinate risk remediation.
• Develop and write security policies and risk narratives.
• Manage risk registrar, phishing tickets, and tabletop exercises.
• Communicate security status to teams and leadership.

Skills

GRC

Security operations

Vendor reviews

Patch management

Vulnerability management

Policy writing

Risk assessment

Job description

Job Description

A client in the PNW is looking for a Sr. Security Analyst or Security Engineer to join their team. This position would be a hybrid remote role with the first 30 days fully onsite to get acclimated. In this role we are looking for someone to have a focused approach on Governance, Risk, Compliance and still be technical and handle a level of security operations. In this role we are looking to have a strong writer and someone who is comfortable not being all hands-on keyboard. In this role we would want someone to have experience with vendor reviews of 3rd parties, risk assessments, patch management, vulnerability management, ensuring systems are secure and reporting to teams to remediate issues, manage the risk registrar, phishing tickets, antivirus, tabletop exercises and more. We are looking for someone who is passionate about security, a strong writer as you will need to write policies and risk. This team covers security for the entire organization, so we are looking for someone who is a jack of all trades with a broad scope in their understanding of security. If you are looking to join a great team and build your skill set further.

• full benefits and a 10% bonus on top of base salary.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to [e-mail] learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.

Skills and Requirements

• 4+ years of professional experience as a Sr. Security Analyst or Security Engineer working with enterprise level tools
• 3+ years of professional experience with Governance, Risk, and Compliance (GRC)
• Experience with 3rd party vendor reviews, risk assessments, patch management, vulnerability management, and audits
• Ability to work in a hybrid working environment
• Strong understanding of Security Frameworks: NIST, HIPAA, PCI/PII, ISO 27001, etc.
• Strong writing capabilities: experience writing stories and quantifying risks, and managing a risk registrar, etc.
• Experience with XDR and/or MDR
• Cloud or Application Development security experience
• AI experience