Security Analyst

Security Analyst II Senior cybersecurity role focused 75% on GRC and 25% on security operations. Looking for someone who can build and mature security programs, not just support existing processes.

Key Responsibilities * Build and manage cyber risk, vulnerability management, and compliance programs. * Develop security policies, standards, controls, and procedures aligned with NIST frameworks. * Configure/administer GRC tools such as ServiceNow GRC/IRM, Archer, or OneTrust. * Automate GRC workflows, reporting, evidence collection, and control monitoring. * Support AI governance, business continuity/disaster recovery, and audits. * Assist with incident response, threat detection, and security monitoring across cloud and on-prem environments.

Must-Haves * 10+ years cybersecurity/IT experience * 5+ years cybersecurity GRC * 4+ years Security Analyst experience * 3+ years Systems Engineer/Administrator experience * Strong knowledge of NIST 800-53, NIST CSF, risk management, vulnerability management, and compliance * Hands-on experience with GRC platforms and workflow automation * Experience with incident response/security operations * CISSP, CISA, CISM, CRISC, CGRC, GIAC, or similar certification * Knowledge of SIEM, SOAR, EDR, IAM/PAM, DLP, MITRE ATT&CK, cloud security, and vulnerability management * PowerShell, Python, or JavaScript experience * Bachelor’s degree in Cybersecurity, IT, Computer Science, or equivalent experience