Jr. GRC Analyst

JUNIOR GRC ANALYST
ROCKVILLE, MD - HYBRID
LONG TERM CONTRACT
SEEKING SOMEONE WHO HAS WORKED WITH THE SERVICENOW GRC APPLICATION

Overview:

• The GRC Analyst supports the administration of Information Security Governance, Risk, and Compliance programs, including policy exception management and enterprise risk register activities using ServiceNow Integrated Risk Management (IRM).

Working under the guidance of Information Security leadership, the analyst will apply established risk assessment methodologies, workflows, and reporting processes to support enterprise cybersecurity governance and risk management initiatives. This role provides hands-on experience in information security governance, risk analysis, policy exception management, enterprise risk management, and ServiceNow IRM.

Key Responsibilities:

Policy Exception Management

• Review policy exception requests for completeness and required documentation.
• Validate business justifications and request additional information as needed.
• Maintain exception records and track approvals in ServiceNow.
• Monitor expiration dates, coordinate renewals, and produce status reports.

Risk Analysis

• Conduct risk evaluations using established methodologies and templates.
• Assess business impact, likelihood, and overall risk.
• Identify compensating controls and document risk analyses.
• Prepare risk-based recommendations for management review.
• Maintain analysis records in ServiceNow.

Enterprise Risk Register Administration

• Create, update, and maintain risk records.
• Track risks identified through assessments, penetration tests, vulnerability scans, security incidents, and other approved sources.
• Monitor mitigation activities, due dates, and risk status.
• Maintain supporting documentation and generate reports.

ServiceNow IRM Administration

• Process policy exceptions.
• Maintain risk register records.
• Track approvals and workflows.
• Generate reports and dashboards.

Stakeholder Support

• Communicate with IT staff, business stakeholders, system owners, managers, and security teams.
• Provide professional customer service and clear written and verbal communication.

Education

• Bachelor's degree in Cybersecurity, Information Technology, Information Systems, Computer Science, Business Information Systems, or a related field.

Preferred Certifications - at least one

• CompTIA Security+
• ISACA IT Risk Fundamentals
• NIST Cybersecurity Framework (NCSF) Practitioner
• CISM Fundamentals
• Cybersecurity, audit, or compliance-related certifications

Experience:
Required

• One (1) year of experience in Information Security, IT Governance, Risk Management, Compliance, Audit, Information Technology, or a related field; or
• Recent graduate with relevant internship or equivalent experience.

Preferred

• ServiceNow experience
• Microsoft 365 proficiency
• GRC program experience
• Technical documentation experience
• Customer service and project coordination experience

Knowledge & Skills:

• Basic understanding of cybersecurity, risk management, information security, NIST Cybersecurity Framework, and compliance concepts.
• Strong analytical, organizational, and critical-thinking skills.
• Excellent written and verbal communication skills.
• Attention to detail and ability to manage multiple priorities.
• Ability to work independently and learn new technologies quickly.

Deliverables:

• Policy exception reviews and tracking records
• Risk analyses and recommendations
• Risk register entries and updates
• Monthly metrics and quarterly reports
• Executive dashboards
• ServiceNow documentation and reporting artifacts

#M1
#LI-CB3

Ref: #851-Rockville-S1

System One, and its subsidiaries including Joulé, ALTA IT Services, TeamPeople, and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.

System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.