Cyber Security GRB Analyst - Bethpage, NY

About the role

PSEG Long Island (PSEG Company) is seeking a Cybersecurity GRC Analyst for a hybrid role based in Bethpage, New York. The position supports the organization’s cybersecurity governance, risk, and compliance program through governance oversight, policy lifecycle management, standards alignment, risk and control assessments, audit coordination, compliance validation, issue remediation tracking, third‑party risk review, and executive reporting and documentation.

Responsibilities

• Support governance oversight activities for the cybersecurity program across the enterprise.
• Maintain and support policy lifecycle management, including the review, update, and communication of cybersecurity policies, standards, procedures, and related documentation.
• Assist with standards alignment to applicable requirements, contractual obligations, and recognized cybersecurity frameworks.
• Perform and document risk and control assessments for systems, applications, vendors, projects, and business processes.
• Identify control gaps, document findings, and support risk treatment planning with business and technical stakeholders.
• Assist with control documentation and control testing to evaluate design and operating effectiveness.
• Provide audit coordination support for internal audits, external audits, and regulatory assessments, including evidence gathering, response tracking, and issue follow‑up.
• Support compliance validation activities to confirm required controls, processes, and documentation are in place and operating as intended.
• Support third‑party risk review activities, including security questionnaires, documentation review, assessment follow‑up, and findings management.
• Maintain risk registers, issue logs, exception records, remediation plans, and supporting documentation.
• Perform issue remediation tracking and follow up with stakeholders to support timely closure of findings, gaps, and action items.
• Prepare executive reporting and documentation related to risk posture, compliance status, audit results, remediation progress, control maturity, and key metrics.
• Support governance committees, risk discussions, and management reporting through accurate and organized documentation.
• Contribute to continuous improvement of GRC processes, templates, reporting, and governance practices.

Requirements

Minimum education: Bachelor’s degree required. Minimum experience: 4+ years in cybersecurity governance, risk, compliance, IT audit, internal controls, or related field (or 8 years of experience without a degree).

Qualifications

• Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, Business, Risk Management or related discipline.
• Four (4) or more years of experience in cybersecurity governance, risk, compliance, IT audit, internal controls, or related field.
• Candidates without a degree who have 8 years of experience in cybersecurity governance, risk, and compliance will be considered.
• Proficiency with Cyber GRC technologies (such as ServiceNow, Archer, RSAM, etc.).
• Background supporting governance oversight, policy lifecycle management, and standards alignment activities.
• Track record performing risk and