Cybersecurity GRC Analyst

REQUEST TECHNOLOGY

Chicago, IL, United States

3 days ago

Apply on www.dice.com

Prepare application

Role details

Contract type

Permanent contract

Employment type

Full-time (> 32 hours)

Experience level

Experienced

Experience required

4 years minimum

Working hours

Regular working hours

Job source

www.dice.com

Tech stack

Artificial Intelligence User Authentication Cyber Security Intrusion Detection and Prevention Information Systems Security Architecture Professional Security Information and Event Management Mobile Security Software Vulnerability Management Firewalls (Computer Science) Information Technology RSA Archer Platform

Job description

Lead responses to client security assessments, questionnaires, and audits, documenting evidence and performing risk assessments as needed.
Create, maintain, and evolve security policies, standards, guidelines, and supporting documentation through strong technical writing.
Manage and support processes that ensure Information Technology (IT) systems meet cybersecurity, risk, and compliance requirements.
Serve as an Information Security subject matter expert, advising technical and non-technical stakeholders across the organization.
Manage the third-party Security Vendor Risk Management program, including assessments, remediation tracking, and lifecycle oversight.
Oversee the security exception request process and provide guidance on appropriate risk treatment decisions.
Manage the full lifecycle of the Security Awareness program, including roadmap development, training evaluation, and effectiveness measurement.
Support and optimize Governance, Risk, and Compliance (GRC) technology platforms and associated workflows.
Conduct evaluations of IT programs and components to confirm alignment with published security standards and frameworks.

Requirements

Bachelor’s degree or equivalent with five (5) years of work experience in IT Security is required.
Certified Information Systems Security Professional (CISSP), Certified Information Security Auditor (CISA), Certified Information Security Manager (CISM), Advanced in AI Audit (AAIA), Advanced in AI Risk (AAIR), Advanced in AI Security Management (AAISM) or other relevant training and certifications are preferred.
Four (4) or more years of Information Security experience, with hands on technical experience strongly preferred.
Strong working knowledge of security frameworks and standards such as ISO 27001, National Institute of Standards and Technology (NIST), System and Organization Controls (SOC), and Standardized Information Gathering (SIG) is required.
Experience in Artificial Intelligence (AI) governance, security, and risk management is required.
Proven ability to produce clear, well-structured security documentation and communicate complex technical topics to varied audiences.
Experience leading risk assessments, vendor security reviews, and client-facing security discussions with professionalism and tact.
Familiarity with GRC platforms, role-based access controls, and a broad range of security technologies and tools.
Working knowledge of areas such as authentication, encryption, firewalls, SIEM, intrusion detection/prevention, vulnerability management, mobile security, and privileged access management.