Security Analyst

Required Skills & Experience

Must-Haves

• 10+ years cybersecurity/IT experience
• 5+ years cybersecurity GRC
• 4+ years Security Analyst experience
• 3+ years Systems Engineer/Administrator experience
• Strong knowledge of NIST 800-53, NIST CSF, risk management, vulnerability management, and compliance
• Hands-on experience with GRC platforms and workflow automation
• Experience with incident response/security operations

Nice to Have Skills & Experience

• CISSP, CISA, CISM, CRISC, CGRC, GIAC, or similar certification
• Knowledge of SIEM, SOAR, EDR, IAM/PAM, DLP, MITRE ATT&CK, cloud security, and vulnerability management
• PowerShell, Python, or JavaScript experience
• Bachelor's degree in Cybersecurity, IT, Computer Science, or equivalent experience

Job Description

Security Analyst II Senior cybersecurity role focused 75% on GRC and 25% on security operations. Looking for someone who can build and mature security programs, not just support existing processes.

Key Responsibilities

• Build and manage cyber risk, vulnerability management, and compliance programs.
• Develop security policies, standards, controls, and procedures aligned with NIST frameworks.
• Configure/administer GRC tools such as ServiceNow GRC/IRM, Archer, or OneTrust.
• Automate GRC workflows, reporting, evidence collection, and control monitoring.
• Support AI governance, business continuity/disaster recovery, and audits.
• Assist with incident response, threat detection, and security monitoring across cloud and on-prem environments.