IT Security Governance (GRC) Analyst
Karthik UppariUnited StatesMIDPosted 5d ago
Cybersecurity GovernanceRisk ManagementComplianceNIST SP 800-53Security Control AssessmentsVITA SEC530CIS ControlsSecurity Risk AssessmentsCompliance ReviewsIT AuditsRisk RegistersRemediation TrackingCorrective Action PlansSecurity PoliciesProceduresAssessment DocumentationCJISVCINHIPAAPCI DSSFERPAFTIPrivacy ReviewsData ClassificationBusiness Impact AnalysisThird-Party Risk ManagementVendor Security AssessmentsAI GovernanceSecurity Risk AssessmentsArcher GRCSOC report reviewsVendor risk managementMOU/MOAData-sharing agreement reviewsIncident responseDisaster recoveryBusiness continuityExecutive reportingSecurity compliance metrics
About the Role
We are seeking an IT Security Governance (GRC) Analyst to support a major state government cybersecurity program. This role involves conducting security risk assessments, compliance reviews, and maintaining risk registers and remediation plans.
Key Responsibilities
• Conduct security risk assessments and compliance reviews
• Evaluate controls against NIST and Virginia security requirements
• Maintain risk registers, audit evidence, and remediation plans
• Coordinate audits and track corrective actions through closure
• Review third-party security documentation and data-sharing agreements
• Develop security policies, procedures, and assessment reports
• Assess AI and emerging technology risks
• Prepare executive summaries and compliance reports
Requirements
• 5+ years in cybersecurity, information security, GRC, or risk management
• 4+ years applying NIST security frameworks, including SP 800-53
• 3+ years in security assessments, IT audits, and remediation tracking
• 5+ years developing security documentation and policies