Security Analyst

About the role

The Information Security Analyst II (GRC) provides support for Governance, Risk, and Compliance activities aligned to NIST CSF, NIST SP 800-53, HIPAA Security Rule, and HITRUST CSF, PCI-DSS. The role supports risk assessments, audit readiness, control validation, and policy governance. The immediate project this person will be working on is a refresh/rebuild of their baseline security policies and to support Third Party Risk Management.

Responsibilities

• Support compliance initiatives aligned to NIST, HIPAA, and HITRUST, PCI-DSS frameworks
• Assist in maintaining control mappings and compliance documentation
• Perform control testing and support evidence collection for audits
• Support HITRUST certification readiness activities
• Support enterprise cyber-risk management activities
• Execute and oversee the third-party risk management process
• Maintain and update the risk register and track remediation
• Support responses to third-party security questionnaires
• Support contract review tasks in support of Cyber and Data security language
• Assist with development and maintenance of security policies and standards
• Maintain audit documentation repositories
• Support reporting on compliance metrics and KPIs
• Collaborate with cross-functional teams to address risk and compliance gaps

Requirements

• 3-5 years of experience in information security, risk, or compliance
• Bachelor's degree in systems/IT Security related field
• Certified in CISSP, CISM or CRISC (ISACA preferred)
• Knowledge of NIST CSF, NIST 800-53, HIPAA, and HITRUST, PCI-DSS
• Strong analytical, documentation, and communication skills
• Ability to work collaboratively across teams
• Self-driven with ability to manage tasks and organize project work

Skills

• HIPAA compliance
• HITRUST
• NIST frameworks
• Information security
• Security controls implementation
• Risk management
• Third-party risk management program
• Governance and risk management
• Contract alignment

Pay

The pay range for this position is $55.00 - $60.00/hr. Individual compensation offered for this position within this range will depend on many factors, including qualifications, skills, relevant experience, job knowledge, geographic location, internal equity, and other pertinent job-related factors.

Benefits

• Medical, dental & vision
• Critical Illness, Accident, and Hospital
• 401(k) Retirement Plan (Pre-tax and Roth post-tax contributions available)
• Life Insurance (Voluntary Life & AD&D for the employee and dependents)
• Short and long-term disability
• Health Spending Account (HSA)
• Transportation benefits
• Employee Assistance Program
• Time Off/Leave (PTO, Vacation or Sick Leave)

Schedule & Location

This is a Contract to Hire position based out of Columbia, MD. The role is hybrid, requiring some on-site presence.

Additional Details

Experience Level: Intermediate. Application deadline: October 30, 2026.