Cybersecurity GRC Analyst

Position Summary

The Cybersecurity GRC role is responsible for establishing, maintaining, and validating governance, risk, and compliance programs that ensure the organization meets cybersecurity, regulatory, and contractual requirements. This role translates security frameworks and obligations into policies, standards, evidence, and repeatable processes, enabling audit readiness and informed risk based decision making across the business.

Primary Responsibilities

• Manage cybersecurity compliance programs.
• Develop, maintain, and update security policies, standards, and procedures.
• Coordinate and maintain audit readiness, including evidence collection and tracking.
• Conduct cybersecurity and compliance risk assessments and maintain the enterprise risk register.
• Track control maturity, remediation activities, and compliance status.
• Partner with IT, Cybersecurity, and business teams to facilitate and ensure controls are implemented and operating as intended.
• Translate regulatory and contractual requirements into actionable internal requirements.
• Support internal and external audits, assessments, and reviews.
• Support security awareness training programs.
• Prepare executive‑level compliance, risk, and status reporting.
• Assist with incident response from a compliance and documentation perspective.
• Promote consistent governance and documentation practices across teams.
• Other duties as required.

Skills / Knowledge / Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science or related field/equivalent practical experience
• Strong understanding of cybersecurity governance, risk, and compliance (GRC) concepts.
• Working knowledge of cybersecurity frameworks (e.g. NIST CSF, SOC 2, CIS, etc.).
• Experience developing and maintaining policies, standards, and procedures.
• Ability to interpret regulatory and contractual security requirements.
• Strong organizational skills with attention to detail.
• Experience tracking controls, evidence, and remediation activities.
• Ability to work cross‑functionally with technical and non‑technical teams.
• Strong written communication skills, especially for documentation and executive reporting.
• Analytical mindset with the ability to assess and articulate risk.
• Ability to document technical controls, standards, and procedures clearly.
• Strong verbal and written communication skills, with the ability to explain technical concepts to non‑technical audiences.

Benefits

• Medical, dental, vision, life insurance
• 401(k) match
• Short- and long-term disability
• Health savings account
• PTO
• Profit Sharing Account

About Us

For nearly 80 years, Cleveland Brothers Equipment Co., Inc. has proudly served as the exclusive Cat® dealer for western, central, and northeastern Pennsylvania, northern West Virginia, and western Maryland. Since 1948, we've built a legacy as a trusted partner in the construction, mining, forestry, and agricultural sectors. From our 30 locations, we deliver comprehensive solutions, including high-quality new, used, and rental equipment, genuine parts, and expert service. Beyond our extensive machinery offerings, we provide diverse solutions, such as industrial engines and generators all supported by our knowledgeable team of professionals. At Cleveland Brothers, we're more than a dealer; we're your dedicated partner committed to helping you achieve your goals. Discover how we can support your operations at www.ClevelandBrothers.com.