Policy & Cybersecurity Compliance Analyst

Cyber Security Compliance Analyst

Software Guidance & Assistance, Inc., (SGA), is searching for a CYBER SECURITY COMPLIANCE ANALYST for a FULL TIME assignment with one of our premier UTILITY clients. Must work onsite in one of these office locations: NEW BRAUNFELS or HOUSTON, TX.

Responsibilities:

• Own the lifecycle management of cybersecurity and regulatory policies, including creation, updates, and ongoing governance across the enterprise
• Evaluate existing policy frameworks to identify gaps, misalignment, or emerging risk areas, and propose practical corrective actions
• Ensure security and compliance documentation remains aligned with evolving regulatory, legal, and operational expectations
• Track and assess organizational adherence to internal policies and applicable compliance obligations
• Execute targeted reviews, control assessments, and policy effectiveness evaluations to surface compliance risks
• Coordinate closely with audit, legal, and risk stakeholders to support internal reviews and external examinations
• Serve as a strategic advisor to business, technology, and people teams on policy considerations tied to system changes, vendor engagements, and process updates
• Translate risk and compliance findings into clear insights that support leadership decision-making
• Develop and deliver employee education initiatives focused on cybersecurity responsibilities and compliance awareness
• Act as a trusted point of contact for policy interpretation and guidance across the organization
• Maintain a structured, centralized repository for security and compliance documentation, ensuring proper versioning and historical retention
• Produce reporting and metrics that communicate compliance posture, trends, and audit outcomes

Required Skills:

• Demonstrated experience developing and managing cybersecurity, risk, or compliance policies in a regulated environment
• Strong working knowledge of common security and privacy frameworks and standards (e.g., NIST-based controls, ISO-aligned programs, data protection regulations)
• Experience conducting policy reviews, compliance assessments, or internal audits
• Ability to partner cross-functionally with technical and non-technical stakeholders
• Excellent written and verbal communication skills, with the ability to translate complex requirements into actionable guidance
• Strong analytical and documentation skills with attention to detail
• Experience maintaining structured documentation and compliance evidence

Preferred Skills:

• Background supporting external audits or regulatory reviews
• Experience aligning policy programs with enterprise risk management strategies
• Familiarity with privacy regulations such as CCPA, HIPAA, or similar frameworks
• Prior involvement in technology implementations, third-party risk reviews, or governance initiatives
• Experience delivering training or awareness programs related to security or compliance
• Industry certifications in cybersecurity, risk, or compliance (e.g., CISSP, CISA, CRISC, ISO lead roles)

SGA is a technology and resource solutions provider driven to stand out. We are a women-owned business. Our mission: to solve big IT problems with a more personal, boutique approach. Each year, we match consultants like you to more than 1,000 engagements. When we say let's work better together, we mean it. You'll join a diverse team built on these core values: customer service, employee development, and quality and integrity in everything we do. Be yourself, love what you do and find your passion at work.