Find work in the United States.

A simpler way to find your next job.

Jobs in the United States

25+ jobs

Save this search

Added 12 hours ago
IT SECURITY LEAD ANALYST
All Kingspan and Affiliate Companies
Deland, FL
Summary: The IT Security Lead Analyst will take a senior role in security intelligence, anomaly hunting, and incident response. The analyst must leverage intuition, security knowledge, and…
Added 12 hours ago
IT SECURITY LEAD ANALYST
Kingspan Insulated Panels - Open
Deland, FL
Summary: The IT Security Lead Analyst will take a senior role in security intelligence, anomaly hunting, and incident response. The analyst must leverage intuition, security knowledge, and…
Added 2 days ago
A
Risk & Compliance Analyst II - Third-Party Risk Management
Allegiant
Las Vegas, NV · Minneapolis, MN
- $102,400 to $124,800 USD / year
Experience with IT risk, information security, internal audit, procurement, vendor management, or compliance programs.
Added 2 days ago
NOSC Analyst
BAE Systems
Sterling, VA
BAE Systems is looking for a Network Operations and Security Analyst to serve as TIER III analyst in a Network Operations and Security Center (NOSC) for a program that delivers cloud and…
Added 2 days ago
Cybersecurity Analyst (48387)
CHARLOTTE EYE EAR NOSE AND THROAT ASSOCIATES PA
Huntersville, NC
Operational awareness of SIEM, EDR/XDR, email security, vulnerability management, web filtering, identity security, privileged access, and cloud security tooling.
Added 2 days ago
Cyber Security Analyst
Regions Bank
Nashville, TN
At Regions, the Cyber Security Analyst is responsible for analyzing, identifying, and documenting cybersecurity information and risks. This role requires proactiveness and an understanding…
Added 3 days ago
External Audit Consultant
Jobgether
Remote, United States
Advise technology support officers and management teams on regulatory compliance, information security, and internal control requirements.
Added 3 days ago
Cyber Defense Analysts – Senior
Koniag Government Services
Washington, DC
The Senior Cyber Defense Analyst will serve as a senior-level cybersecurity operations professional responsible for performing advanced monitoring, detection, analysis, and response to…
Added 3 days ago
Senior Strategic and Operational Intelligence Analyst
Humana
Austin, TX
…into specific, prioritized actions for Detection Engineering, SOC, Threat and Vulnerability Management, and other consuming…
Added 3 days ago
GRC Specialist
Mixpanel
San Francisco, CA
Baseline understanding of security systems and processes (e.g., access management, logging, encryption, vulnerability management) and of audit processes and frameworks such as SOC 2 and ISO…
Added 3 days ago
SO
IT Security Analyst - Office of Cyber Security (DoIT #10117491)
State of New Mexico
NM
- $33.12 to $49.68 USD / hour
…the State of New Mexico (SoNM) Information Technology (IT) security program in coordination with state agencies. The administrative code (1.12.20 NMAC) and federal oversight requires state…
Added 3 days ago
Principal Security Monitoring and Response Analyst
Mastercard
O'Fallon, MO
The Principal Security Monitoring and Response Analyst is the principal program lead and senior subject matter expert for the integrated Security Operations Center (SOC), Incident Response…
Added 3 days ago
Cyber Security Analyst I-IV
Georgia System Operations Corporation
Tucker, GA
Level IV – Ideally, 6+ years of cyber or information security experience with a bachelor's degree, or 10+ years of equivalent experience. Serves as a subject-matter expert and technical…
Added 3 days ago
OS
Cybersecurity Analyst
Odyssey Systems Cons
Colorado Springs, CO
- $31,533 USD / year
…vulnerabilities and drive remediation. You will also support our GRC program by maintaining System Security Plans (SSPs) and POA&Ms, providing audit and assessment evidence, and supporting…
Added 3 days ago
M
Analyst, Cyber Defense
McDonald's
Chicago, IL
- $104,482 to $130,602 USD / year
As a Detection & Response Analyst within the 24/7 Global Security Operations Center (GSOC), your responsibilities include using defensive measures and information gathered from various…
Added 3 days ago
Information Security Analyst I
Panasonic North America
De Soto, KS
Panasonic Energy is seeking an Information Security Analyst I to support the Information Security Management function. Reporting to the ISM Manager, this entry-level individual contributor…
Added 4 days ago
Security Analyst II
Harborstone Credit Union
Lakewood, WA
The Security Analyst II performs core functions of day-to-day operations for in-place security solutions and the monitoring, identification, investigation, and resolution of security…
Added 4 days ago
External Audit Consultant - Remote
Isys Technologies
Remote, United States
…experience in the information technology arena as an IT auditor, IT security analyst, IT manager, business analyst, system administrator or a combination of…
Added 4 days ago
SecOps Engineer
Open Approach
Burlington, VT
You'll serve as the primary escalation point for our Security Operations Analyst. When things get complex, they will come to you. You will own the deeper investigations, lead advanced…
Added 4 days ago
NE
Security Operations Center (SOC) Manager
National Education Loan Network, Inc. (NELN)
Lincoln, NE · Centennial, CO · Madison, WI
- $105,000 to $140,000 USD / year
This role fits a hands-on security leader with deep SIEM, detection engineering, and security alerting experience who wants to build a modern, intelligence-driven SOC. You will shape…
Added 4 days ago
Security Engineer
Ovative Group, LLC
United States
Ovative Group is seeking a Security Engineer to join our growing Information Security team. Reporting to the Lead Security & Cloud Engineer, this role owns the day-to-day execution of…
Added 4 days ago
Cybersecurity Analyst
Odyssey Systems Consulting Group, Ltd.
Colorado Springs, CO
…vulnerabilities and drive remediation. You will also support our GRC program by maintaining System Security Plans (SSPs) and POA&Ms, providing audit and assessment evidence, and supporting…
Added 4 days ago
Security Operations Center Analyst - Mid
Koniag Government Services
Washington, DC
We are seeking a skilled Mid-Level Security Operations Center (SOC) Analyst to support the U.S. Small Business Administration (SBA). The ideal candidate is an experienced cybersecurity…
Added 4 days ago
IG
Sr Risk Analyst
Informa Group Plc.
Newton, MA
- $150,000 to $170,000 USD / year
We are seeking an experienced and strategic Senior Cyber Risk Analyst to join our team. This role requires deep expertise in enterprise cybersecurity risk management, with responsibility…
Added 4 days ago
J&
Sr. Cybersecurity Analyst
Johnson & Quin Inc
Niles, IL
- $120,000 to $140,000 USD / year
The Senior Information Security Analyst protects Company organizational systems and data by supporting and enhancing security operations, risk management, and security controls. This role…

Cyera

Sr. GRC Risk Analyst

Creve Coeur, MO, United States

Compensation Range: $100,000 - $120,000.

Apply About employer

Applications open in a new tab.

Job details

Pay: Compensation Range: $100,000 - $120,000.
Experience: 3 to 5 years of experience in GRC, IT risk, information security risk, or enterprise risk management
Posting language: English

Original job description

Description

WHO WE ARE

Come join the company at the center of how the world adopts AI securely. Cyera’s mission is to give enterprises the confidence to embrace AI safely - deciding exactly what it can see and do as it reaches deeper into the business. We started by solving the hardest problem in data security: finding and securing data faster and more precisely than anyone thought possible. That foundation is now the essential AI trust infrastructure for the Fortune 1000. We’re hiring mission-driven talent to put those leaders at the center of our story.

THE OPPORTUNITY

We are hiring a Senior GRC Analyst- Risk to build and run Cyera's enterprise risk register. You will design the risk management framework, own the full risk lifecycle from identification to closure, and turn risk data into clear decisions for leadership. This is a builder role: you will set the foundation, then operate it at scale as Cyera grows. You will report to the GRC Manager and work closely with Security, Engineering, IT, Legal, Privacy, Finance, and business leaders.

RESPONSIBILITIES:

Build the framework

Design and document Cyera's enterprise risk management methodology, including risk taxonomy, scoring model (likelihood and impact), risk appetite and tolerance thresholds, and treatment options
Align the program to recognized frameworks such as ISO 27001, NIST CSF and NIST 800-30, SOC 2, and ISO 42001 for AI risk
Establish risk ownership, RACI, escalation paths, and governance cadence with the GRC Manager and leadership
Standardize risk register structure, naming conventions, and ID nomenclature so risks are consistent and audit-ready

Operate the risk register

Own the enterprise risk register end to end: identification, assessment, treatment, monitoring, acceptance, and closure
Run recurring risk assessments and workshops with control owners and business stakeholders
Track treatment plans, remediation due dates, and risk acceptances, and follow up with owners to keep work moving
Map risks to controls, policies, audit findings, vendor risks, and incidents so the register reflects the full picture
Maintain evidence and documentation that supports internal and external audits

Report and influence

Produce risk reporting and dashboards for the GRC Manager, CISO, and governance committees, including top risks, trends, and KRIs
Translate technical and operational risk into clear business language for executives
Prepare risk inputs for audits, customer security reviews, and board or leadership updates

Improve and scale

Automate intake, scoring, and reporting through GRC tooling and simple workflows (Jira, GRC platforms, spreadsheets) before adding complexity
Integrate risk management with TPRM, vulnerability management, incident response, AI governance, and change management
Train risk owners and build reusable templates, guides, and playbooks

Requirements

REQUIRED QUALIFICATIONS:

3 to 5 years of experience in GRC, IT risk, information security risk, or enterprise risk management
Hands-on experience building or significantly maturing a risk register and risk assessment process, not just maintaining one
Working knowledge of at least two of ISO 27001, NIST CSF, NIST 800-30, NIST 800-53, or SOC 2
Strong grasp of risk scoring, risk appetite, treatment, and acceptance, and the judgment to apply them practically
Experience mapping risks to controls and supporting external audits
Ability to run risk conversations with engineers and executives, and to hold owners accountable without slowing the business
Clear, concise writing and reporting skills
Comfort working in a fast-moving SaaS or cloud environment with changing priorities
Bachelor's degree in a related field, or equivalent experience

Nice to have

Certifications such as CRISC, CISA, CISSP, ISO 27001 Lead Implementer or Lead Auditor, or ISO 31000 Risk Manager
Experience with GRC platforms (for example Anecdotes, Drata, Vanta, ServiceNow IRM, or Archer) and Jira workflows
Exposure to AI risk management, ISO 42001, or the EU AI Act
Familiarity with multi-framework environments such as PCI DSS, FedRAMP, C5, or ENS
Experience at a security or data security vendor
Data Privacy and Protection experience

COMPENSATION INFORMATION:

Compensation Range: $100,000 - $120,000. The range represents total compensation, and may include incentive for sales roles, equity or benefits, as applicable. This compensation range represents Cyera’s good faith and reasonable estimate of the range of possible compensation for this role at the time of posting, and Cyera may ultimately pay more or less than the posted range. The final salary for this position will be determined in Cyera’s sole discretion, consistent with applicable law, and based on a variety of factors, including but not limited to the employee’s work experience, skills, and qualifications for the role, as well as the needs of Cyera’s business and other operational considerations. Final compensation will vary based on seniority and relevance of experience, location, and position requirements. This role may be eligible for potential merit increases based on factors such as individual or company performance, time in role, and other discretionary factors. In addition to a standard benefits and equity package, we offer a generous salary. Final compensation will vary based on seniority and relevance of experience, location, and position requirements. This role may be eligible for potential merit increases based on factors such as individual or company performance, time in role, and other discretionary factors.

BENEFITS - Why Cyera?

Ability to work remotely, with office setup reimbursement
Unlimited PTO
Paid holidays and sick time
Health, vision, and dental insurance
Life, short and long-term disability insurance

Apply About employer

More about this job

Skills

Risk management
Leadership
Documentation
Reporting
Jira
Incident response
Change management
Cybersecurity
Hazard assessment
CISA
CISSP
ServiceNow
Apply information security policies

Report this job