Information Security Governance Risk and Compliance Analyst
USD 104K-158K (estimate) Senior-level Full Time
Tasks
- Administer enterprise GRC platform controls and evidence workflows
- Analyze data flow diagrams network diagrams and solution architectures
- Assess vendor risk for sensitive data access
- Automate compliance controls and evidence collection
- Conduct systems audits and assessments
- Document POA and M remediation plans and validation criteria
- Evaluate vendor architectures and data flows
- Maintain security metric and KPI reporting
- Map compliance requirements to controls
- Monitor and analyze security risks and metrics
- Perform customer and regulatory risk assessments
- Support daily GRC operations
- Support third party risk management audits
Perks/Benefits
- N/A
Skills/Tech-stack
800-171 | 800-53 | Access Management | Audit management | CIS Benchmarks | Continuous Monitoring | Control libraries | Control mapping | Data Flow | Data flow diagram | Detection Systems | Encryption | Enterprise IT | Enterprise IT governance | Evidence Workflows | Flow Diagram | GDPR | GRC platform | GRC platform administration | Governance Risk | Governance Risk and Compliance | HIPAA | HITRUST | HITRUST CSF | Hacking | IT Governance | Identity and Access Management | Identity and access | Intrusion Detection | Intrusion detection systems | KPI Reporting | Logging and Monitoring | NIST | NIST SP | NIST SP 800 | NIST SP 800-171 | NIST SP 800-53 | Network Diagram | PCI DSS | Penetration Testing | Platform Administration | Power Automate | Risk Assessment | Risk Management | Risk and Compliance | SOC 2 | SOC Reporting | SP 800-171 | SP 800-53 | Security Compliance | Security metrics | SharePoint | Third Party | Third-Party Risk | Third-party risk management | Vendor Risk | Vendor Risk Assessment | Vulnerability Management
Education
Related jobs
-
Cybersecurity Analyst USD 140K-262K800-171 | Azure AD | Azure Policy | Azure Security | Azure Security CenterSenior-level Full TimeHouston, TX, United States3h ago
-
Cloud Security | Cyber Risk | Cyber Risk Assessment | DLP | DPOMid-level Full TimeCenter, Center District, IL6h ago
-
Senior Info Sec Engineer USD 128K-214KAccess Management | Active Directory | Asset Management | Cybersecurity | FirewallDay shift | Full-time | Hybrid work | Onsite minimum 2 days per weekSenior-level Full TimeMaryland-Silver Spring7h ago
-
Security & Compliance Analyst USD 90K-110KAWS | AWS IAM | AWS Secrets | AWS Secrets Manager | Awareness TrainingSenior-level Full TimeNew York, NY, 10010, US11h ago
-
Cybersecurity Analyst USD 87K-157KACAS | Cybersecurity | DOD STIG | IAVM | LinuxMentoring opportunities | Relocation assistance | Team collaboration with customersMid-level Full Time2683 Huntsville AL, United States20h ago
-
Lead Information Security Engineer USD 140K-231KAWS EC2 | Amazon Web Services | Application Security | CI/CD | Cloud SecuritySenior-level Full TimeSalt Lake City, Utah (Holladay), United …20h ago
-
Cybersecurity Risk Senior Analyst USD 111K-167KAccess Management | Cloud Security | Cybersecurity | ISO 27001 | IT Operational Risk ManagementSenior-level Full TimeWestbranch, United States20h ago
-
Information Systems Security Officer (ISSO) II USD 97K-131KAudit Logging | Authorization and Accreditation | Configuration Management | Impact analysis | Information Security ManagementMid-level Full TimeUSA DC Washington - Customer Proprietary …20h ago
-
Information Technology/Assurance (IT/IA) Specialist II USD 107K-140K2012 R2 | Assessment and Authorization | COMSEC | Common Criteria | Exchange Server (2010401k match | Dental insurance | Health insurance | Paid time off | Vision insuranceMid-level Full TimeUSA DC Washington - Customer Proprietary …20h ago
-
Information Systems Security Officer (ISSO) II USD 97K-131KAudit Records | Authorization Documentation | Configuration Management | Impact analysis | Incident Handling401k match | Dental insurance | Flex work week options | Health insurance | Paid time offMid-level Full TimeUSA DC Washington - Customer Proprietary …20h ago
-
Information System Security Officer USD 103K-131KCertification and accreditation | Configuration Management | DoD Security | DoD Security Policy | EncryptionSenior-level Full TimeLaurel, MD1d ago
-
Zero Trust ISSM USD 109K-150KACAS | Compliance Management | Continuous Monitoring | Control Implementation | Cybersecurity impact assessmentMid-level Full TimeTysons Corner, VA, USA, 220431d ago
-
Cyber Security Analyst (Senior) - US Navy USD 140K-170KAuthority to Operate | Continuous Monitoring | Control Assessment | DoD Cybersecurity | Incident ResponseSenior-level Full TimeWashington, DC, US2d ago
-
IT Security Manager USD 100K-130K800-53 | BigFix | Continuity planning | CrowdStrike | CybersecurityOn-call supportMid-level Full TimeWashington, DC (3 days Onsite/2 Remote) R3d ago
-
Information System Security Engineer (ISSE) USD 100K-203K800-53 | ACAS | AWS | Access Control | Access Control PlanSenior-level Full TimeLos Angeles, CA3d ago
-
Audit Readiness | Compliance | Control Testing | Documentation review | GRCEntry-level InternshipDetroit3d ago
-
Vulnerability Disclosure Analyst USD 95K-125KAccess Control | Authentication Protocols | C# | C++ | CryptographyExpensed lunches | Gym reimbursement | Inclusive employee events | Learning and development opportunities | Virtual eventsMid-level Full TimeRemote in the United States R3d ago
-
Information Security Analyst USD 47K-67KDetection Systems | Encryption | Event management | Information security | Intrusion Detection10 paid holidays per year | Career Advancement and Employee Development Opportunities | Paid parental leave | Paid vacation and sick time | Remote work within ArizonaMid-level Full TimeREMOTE OPTIONS, PHOENIX R3d ago
-
Mid-level Full TimeBoca Raton, Florida, United States3d ago
-
National Security Analyst USD 76K-153KArms Control | Control analysis | Data Analysis | Export Control Analysis | Export control401k retirement plan | Accidental death and dismemberment | Dental insurance | Employee assistance plan | HSA optionsMid-level Full TimeAiken, SC, United States3d ago
-
IT GRC Contract Analyst USD 65K-85KAzure DevOps | CSA | Compliance | Contract Management | Cybersecurity401k | Dental insurance | Employee discounts | Fully remote | Medical insuranceMid-level Full TimeNew York, NEW YORK, United States R3d ago
-
Access Management | Application Security | CIS Controls | COBIT | Cloud Security401k match | Dental insurance | Life insurance | Long-term disability | Medical insuranceSenior-level Full TimeNew York3d ago
-
ACAS | Asset Threat Vulnerability Analysis | CJCSM 6510 | CJCSM 6510.01B | Cyber Operations401k | Dental insurance | Health insurance | Paid time off | Tuition assistanceEntry-level Full TimeColorado Springs, CO, US3d ago
-
Compliance | Control Systems | Cybersecurity | Dashboard Development | Exception ReviewBusiness hours Monday to Friday | Contract position W2 | Onsite workSenior-level Full TimeHouston, Texas, United States3d ago
-
Entry-level Full TimeO'Fallon, MO, United States3d ago