> Markdown version of [/jobs/ext/4572232-cyber-analyst](https://www.wearedevelopers.com/jobs/ext/4572232-cyber-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cyber Analyst - **Company:** BISHOP INSURANCE AGENCY, INC. - **Location:** Westlake, TX, United States - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Software System Penetration Testing, CompTIA Security+, Cyber Security, Computer Networks, Internet Security, PCI Data Security Standards, Security Information and Event Management, Mitre Att&ck, Malware, Firewalls (Computer Science), Information Technology, Cybercrime, CIS Benchmarks, Devsecops, Vulnerability Analysis - **Published:** November 4, 2026 - **Apply:** https://www.careerbuilder.com/job-details/cyber-analyst-westlake-tx--bd763ba1-a6a4-4382-a113-827ce5783325 ## About the Role Analysis Skills, Insurance, Marketing, Security Analysis, Internet Security, Regulatory Compliance, Analysis Skills, Regulatory Requirements, Vendor/Supplier Management, Risk Management, * Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field (or equivalent experience/certifications). * Certifications such as CompTIA Security+, CySA+, CEH, GIAC, CISA, CRISC, or CISSP highly preferred. Required Skills and Abilities * 2-5+ years of experience in cybersecurity, IT security, or related roles (experience with GRC/compliance activities is a plus). * Proficiency with security tools (SIEM, vulnerability scanners, endpoint protection) and understanding of frameworks like NIST, MITRE ATT&CK, and common GRC standards. Soft Skills * Strong problem-solving, analytical, communication, and documentation skills. * Curiosity and initiative to research unfamiliar issues, troubleshoot independently. * Ability to take ownership of assigned work, communicate progress and blockers, and follow through to completion. * Collaborative approach to problem-solving knowledge sharing, welcoming feedback, and respectfully considering different perspectives and alternative solutions. ## Description We are seeking a Cybersecurity Analyst who's experience will be pivotal in protecting the company's data, systems, and infrastructure. The analyst will be responsible for assessing security controls, managing vendor risk, and collaborating with internal teams to ensure compliance with regulatory requirements., * Monitor, analyze security alerts and from various tools (e.g., SIEM, EDR, firewalls, network traffic) to detect intrusions, malware, or anomalous activity. * Perform in-depth investigations of security incidents to determine root cause, identify IOAs and IOCs and recommend remediation steps. * Respond to and mitigate cybersecurity incidents containment, eradication, and recovery efforts. * Conduct vulnerability assessments, oversee penetration testing support, and risk evaluations to identify and prioritize threats. * Collaborate with cross-functional teams (IT, legal, HR, audit, DevSecOps) on security projects, awareness training, threat intelligence, and GRC initiatives. * Stay current on evolving cyber threats, tools, regulatory landscapes, and best practices; contribute to continuous improvement of the security and compliance posture. * Monitor and report on cybersecurity metrics, prepare detailed reports on security events and posture. * Develop, review, and maintain cybersecurity procedures, playbooks, standards and policies aligned with industry frameworks (e.g., NIST, ISO 27001, CIS Controls) and regulatory requirements. * Support Governance, Risk, and Compliance (GRC) activities, including conducting risk assessments, maintaining the risk register, performing gap analyses against compliance standards (e.g., SOC 2, PCI DSS, HIPAA, GDPR, CCPA), and tracking mitigation plans. * Assist with internal and external compliance audits, evidence collection, vendor risk assessments, and remediation of identified findings to ensure ongoing adherence to regulations and organizational policies, GRC status, and metrics for management and audit purposes.