Jobs → Data & Analytics → IT Security Analyst – GRC

About the Role We are looking for an experienced IT Security Analyst with a strong background in Cybersecurity Governance, Risk & Compliance (GRC), security assessments, and regulatory compliance. Key Responsibilities • Conduct security risk assessments, Business Impact Analyses (BIAs), data classification, and privacy reviews • Perform security control assessments and support IT audits • Apply NIST SP 800-53, CIS Controls, and applicable security compliance requirements • Maintain risk registers, document findings, and track remediation activities • Review vendor security documentation, SOC reports, security questionnaires, and data-sharing agreements • Develop security policies, procedures, assessment reports, and executive summaries • Support audit readiness, incident response governance, business continuity, and emerging technology risk reviews Requirements • 5+ years of cybersecurity, information security, IT security governance, or risk management experience • 3+ years of security risk assessments, GRC activities, and compliance reviews • 4+ years of experience with NIST security frameworks, including NIST SP 800-53 • 3+ years of security control assessments, IT audits, risk remediation, and security documentation • Strong communication, stakeholder management, and analytical skills