Vulnerability Management & GRC Analyst

Selective Insurance; Short Hills (NJ); On-site; USD 116,000 - 157,000; Full time

Benefits offered by this job

comprehensive health care plans

retirement savings plan with company  

Employee Stock Purchase Program

tuition assistance and reimbursement

20 days of paid time off

Job summary

Selective Insurance is seeking a GRC/Third-Party Risk and Vulnerability Management Analyst in New Jersey. You will perform governance, risk, and compliance activities, coordinate vendor due diligence, and support audit requirements.

The role emphasizes evidence validation, remediation tracking, and clear reporting to stakeholders. Ideal candidates will have 3–5 years of GRC or related experience, familiarity with NIST and SOX controls, and strong communication skills.

Qualifications

• Working knowledge of cybersecurity, risk management, compliance, vulnerability management, audit, or third-party risk concepts.
• Ability to evaluate security evidence and identify incomplete information to flag risk.
• Strong attention to detail and ability to manage multiple assessments concurrently.
• Clear written and verbal communication for business stakeholders.
• Proficiency with Microsoft Office; experience with GRC, vendor risk, vulnerability management, ticketing, or reporting tools is preferred.

Responsibilities

• Execute GRC activities including risk documentation, control mapping, and evidence tracking.
• Coordinate policy and procedure lifecycle updates and validation of evidence.
• Prepare materials for governance forums, risk reviews, audits, and compliance reporting.
• Coordinate vendor assessments, due diligence, and stakeholder communications through closure.
• Review vendor questionnaires, SOC/ISO reports, penetration test summaries, and other artifacts for risk relevance.
• Document assessment conclusions, remediation items, and residual risk in line with TPRM procedures.
• Track remediation status, exceptions, and aging issues; validate ownership and progress with stakeholders.
• Contribute to metrics on risk, vendor status, vulnerability remediation, and documentation completeness.
• Assist with audit findings remediation, control gaps, risk acceptances, and compliance actions.

Skills

Cybersecurity

Risk management

Compliance

Vulnerability management

Audit

Third-party risk

Documentation

Communication

GRC tools

Reporting tools

Education

Bachelor's degree in a related field

Tools

GRC software

Ticketing tools

Reporting tools

Job description

Selective Insurance is seeking a GRC/Third-Party Risk and Vulnerability Management Analyst in New Jersey. You will perform governance, risk, and compliance activities, coordinate vendor due diligence, and support audit requirements.

The role emphasizes evidence validation, remediation tracking, and clear reporting to stakeholders. Ideal candidates will have 3–5 years of GRC or related experience, familiarity with NIST and SOX controls, and strong communication skills.