GRC Analyst II

Responsibilities

• Provide strategic and technical security mitigation planning and participate in the design, development, and maintenance of GRC activities aligned with NIST 800-171.
• Document and maintain GRC artifacts including process documentation, risk registers, and control mappings.
• Develop, maintain, and track Plans of Actions and Milestones (POA&Ms), including remediation status and supporting evidence.
• Participate in stakeholders interviews, working sessions, and documentation reviews to support GRC assessments.
• Provide technical expertise in the development, maintenance, and enhancement of corporate security operating procedures, standards, and best practices.
• Aid with preparation for internal and external audits, assessments, and regulatory reviews, including evidence collection and response coordination.

Qualifications

• Bachelor's Degree in Cybersecurity, Technology Risk, Compliance, Audit, or related field, or equivalent experience (6 years of experience may be considered in lieu of a Bachelors Degree).
• Minimum two (2) years of experience in cybersecurity, technology risk, compliance, audit related roles, or six (6) years of experience may be considered in lieu of a Bachelors Degree.
• Experience supporting IT audits, risk assessments, or compliance assessments.
• Hands-on experience developing and maintaining POA&Ms.
• Ability to follow defined processes while managing multiple compliance-related tasks.
• Ability to travel up to 10%.
• Active Secret clearance or the ability to obtain and maintain.

About the Role

The Governance, Risk, and Compliance (GRC) Analyst II configures, implements, and manages security devices through strategic and technical security mitigation planning. This involves daily threat analysis and incident management.

Requirements

• Experience supporting IT audits, risk assessments, or compliance assessments.
• Working knowledge of CMMC controls, NIST 800-171 requirements, and compliance processes.
• Hands-on experience developing and maintaining POA&Ms.
• Ability to follow defined processes while managing multiple compliance-related tasks.
• Ability to travel up to 10%.
• Active Secret clearance or the ability to obtain and maintain.

Skills

• Technical expertise in the development, maintenance, and enhancement of corporate security operating procedures, standards, and best practices.
• Strong written and verbal communication skills, particularly for documentation and audit response.
• Detail-oriented with strong analytical and organizational skills.

Benefits

Immediate Medical (FSA and HSA), Dental, and Vision coverage.
401K Match with 100% immediate vesting.
9X80 compressed work schedule for qualifying roles.
Tuition Reimbursement/Student Loan Repayment.
Generous PTO and 11 paid Holidays per year (9 designated holidays and 2 floating holidays).
8 weeks of 100% Paid Family Leave.

Pay

Competitive compensation package.

Schedule

Flexible work schedule available.