Cybersecurity GRC Analyst

Cybersecurity GRC Analyst (Remote)

Location: 100% Remote
Rate: $51/hour (No PTO)

Overview

We are seeking a Cybersecurity GRC Analyst to support enterprise-wide cybersecurity risk management, governance, and compliance initiatives. This role is responsible for conducting risk assessments, enhancing security practices, evaluating controls, and helping protect organizational data from unauthorized access, disclosure, or misuse.

The ideal candidate will have experience in cybersecurity governance, risk management, compliance, IT audit, and security controls, along with exposure to ServiceNow and database environments.

Key Responsibilities

• Conduct cybersecurity risk assessments and control evaluations.
• Develop and enhance organization-wide security policies, standards, and best practices.
• Research emerging threats, vulnerabilities, and security trends, providing recommendations to leadership.
• Support governance, risk, and compliance (GRC) initiatives and regulatory requirements.
• Assess, plan, and implement layered security measures to strengthen the organization's security posture.
• Partner with IT, Audit, Compliance, and business teams to address security risks and improve controls.
• Maintain security-related documentation, reporting, and compliance evidence.
• Utilize ServiceNow and other tools to support risk and compliance processes.

Required Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
  • Additional relevant experience may be considered in lieu of a degree.
• 3+ years of experience in cybersecurity, with a focus on:
  • Cybersecurity GRC
  • IT Risk Management
  • Information Security Compliance
  • Security Governance
  • IT Audit and Controls
• Experience with ServiceNow, databases, risk assessments, and Microsoft Office applications.
• Strong understanding of cybersecurity frameworks, risk management methodologies, and industry best practices.
• Excellent communication skills with the ability to work effectively with technical and non-technical stakeholders.
• Ability to manage multiple priorities in a fast-paced environment.

Preferred Certifications

• CISSP (Certified Information Systems Security Professional)
• CEH (Certified Ethical Hacker)
• CTIA (Certified Threat Intelligence Analyst)
• CAP (Certification and Accreditation Professional)
• EnCase Certified Examiner

Ideal Backgrounds

• Cybersecurity GRC Analyst
• Information Security Analyst (Governance/Risk)
• IT Risk Analyst
• Information Security Compliance Analyst
• IT Auditor with cybersecurity experience
• Security Governance Analyst

Nice-to-Have Backgrounds

• Internal Auditor focused on IT controls
• IAM Governance Analyst
• Third-Party Risk Analyst
• Security Consultant performing risk and control assessments

System One, and its subsidiaries including Joulé, ALTA IT Services, TeamPeople, and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.

System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.