Senior GRC Analyst

Northwest Partners is supporting a major initiative with a top-tier organization in the insurance space and is looking for an experienced Security human risk and resilience analyst to contribute to the success of this work. This role combines security governance, risk, and compliance execution with human-risk and security-culture program design, using risk and workforce data to drive measurable improvements in security behavior and control effectiveness. What YOU will do• Execute security risk assessments, control and policy support, issue tracking, governance reporting, and assurance coordination, with sufficient technical understanding to challenge weak evidence or control design.• Design targeted security-culture and human-risk interventions based on role, behavior, business context, incident patterns, and measurable risk indicators.• Develop role-based education, leader toolkits, campaigns, and behavior-change initiatives that extend beyond annual awareness requirements.• Analyze GRC, control, incident, phishing, training, and workforce data to identify risk patterns and measure program effectiveness.• Develop dashboards, KRIs, KPIs, cohort analyses, executive insights, and action plans tied to risk outcomes.• Partner with business leaders, human resources, communications, technology teams, and security specialists to implement sustainable improvements in behavior and control execution.• Own assigned GRC and security-culture processes end to end, including standardizing, automating, documenting, and improving recurring workflows. What YOU will bring us• 5+ years of cybersecurity GRC, risk, compliance, security awareness, human risk, change management, or related experience, including ownership of risk and control work and measurable stakeholder or behavior-change outcomes.• Bachelor's degree in cybersecurity, information systems, risk management, business, communications, behavioral science, education, or a related discipline, or equivalent relevant professional experience.• Practical experience with security GRC processes, including risk assessments, controls, policies, issues, governance, and assurance support.• Strong analytics capability using spreadsheets, BI and reporting tools, GRC platforms, or equivalent data sources.• Experience designing and measuring security-awareness, human-risk, or behavior-change interventions.• Ability to evaluate technical security evidence and identify when a control or response does not address the underlying risk.• Working knowledge of cybersecurity risks and controls across common domains, with the ability to connect security culture to incidents and control outcomes.• Ability to build clear metrics, dashboards, and risk narratives for leaders.• Understanding of security governance, policy, risk treatment, assurance, and issue-management concepts.• Ability to distinguish compliance activity from meaningful risk reduction.• Excellent written and verbal communication skills, including the ability to tailor messages for executives, leaders, technical teams, and general workforce populations.• Demonstrated behavior-change and stakeholder-influence capability.• Analytical curiosity and evidence-based decision-making skills.• Independent process ownership and a continuous-improvement mindset.• Security or risk credentials such as CISSP, CISM, CRISC, Security+, or comparable certification are preferred.• Formal training or certification in change management, adult learning, communications, or behavioral science is preferred.• Experience with GRC platforms, BI and analytics tools, phishing or human-risk platforms, and security metrics is preferred.• Experience supporting audit, compliance, or governance forums in a regulated enterprise is preferred. Disclaimer: All candidates will be asked to briefly show a government-issued ID on video during the first interview. This step protects the integrity of the hiring process, given the rise in applicant impersonation and employment fraud. Benefits Include:Comprehensive benefits available to full-time employees About Northwest PartnersNorthwest Partners is an equal opportunity employer. At Northwest Partners we are dedicated to moving at the speed of innovation. We work with clients across the globe to provide exceptional knowledge, talent, and resources. As a trusted partner, we merge the client's vision with our expertise to deliver powerful results. Northwest Partners is known for building and managing elite teams in technology across diverse industries. Our mission is to empower every talent and every client to achieve more.