Cybersecurity Engineer

Job Description

Job Description

Come build, innovate, disrupt, and thrive!

KēSTA I.T. is actively seeking a Cybersecurity Engineer for an immediate full-time opportunity with our industry leading client.

Are you on the lookout for a unique career opportunity that offers the chance to make a significant impact? If you're eager to contribute to a thriving and stable organization while maintaining your confidentiality, continue reading...

A Cybersecurity / GRC Engineer supports the execution and continuous improvement of an organization’s governance, risk, and compliance (GRC) program. This role operates under the direction of GRC leadership and is responsible for day-to-day risk, compliance, and audit activities to ensure cybersecurity practices align with regulatory, contractual, and business requirements.

This position plays a key role in operationalizing cybersecurity governance by conducting risk assessments, supporting audits, maintaining control frameworks, and partnering across IT and business teams to track and remediate findings. The ideal candidate is detail-oriented and analytical, with the ability to translate technical risks and controls into clear documentation and actionable insights.

Responsibilities

• Conduct cybersecurity risk assessments for systems, applications, and business processes
• Support third-party and vendor risk assessments, including due diligence reviews
• Identify control gaps, document risks, and assist in developing remediation plans
• Maintain and update the enterprise risk register, including risk scoring and tracking
• Partner with control owners to validate mitigation efforts and assess risk status
• Support internal and external audits by coordinating evidence collection and responses
• Track audit findings and remediation activities, ensuring proper validation and closure
• Assist with security questionnaires, RFP responses, and due diligence requests
• Support compliance with regulatory and contractual requirements
• Maintain and update cybersecurity policies, standards, and procedures
• Map controls to industry frameworks such as NIST CSF, ISO 27001, and CIS
• Support the development and maintenance of a unified control framework
• Assist with control testing activities and documentation of effectiveness
• Develop and maintain GRC metrics, dashboards, and reporting artifacts
• Track key risk indicators (KRIs), audit trends, and remediation progress
• Prepare reports and summaries for leadership and stakeholders
• Maintain organized documentation and evidence repositories
• Collaborate with cross-functional teams to drive risk awareness and remediation efforts
• Support process improvements to enhance GRC efficiency and scalability
• Assist in the implementation and optimization of GRC tools and automation
• Stay current on evolving cybersecurity risks and compliance requirements
• Perform additional related duties as needed

Requirements

• Bachelor’s degree in Cybersecurity, Information Technology, Risk Management, or a related field
• 3+ years of experience in cybersecurity, risk, compliance, or audit-related roles
• Experience supporting audits, risk assessments, and compliance initiatives
• Experience collaborating across IT and business teams
• Working knowledge of cybersecurity frameworks such as NIST CSF, ISO 27001, and CIS

Preferred Qualifications:

• Relevant certifications such as Security+, CISA, CRISC, or similar
• Familiarity with GRC platforms (e.g., ServiceNow GRC, Archer, Drata, Vanta or similar tools)

Core Skills:

• Strong analytical, documentation, and organizational capabilities
• Ability to communicate technical concepts clearly to non-technical stakeholders
• Attention to detail and ability to manage multiple priorities effectively

About KēSTA I.T.:

Our name says it all; KēSTA I.T. (Keys-to-I.T.) AND our people are our keys to our success!

KēSTA I.T. is a premier Utah-based technical staffing and consulting services firm. We specialize in temporary and permanent placement of Software, Hardware, Network, Cloud, CRM/ERP, Data, End-User support, Web and Executive / leadership-based positions on a full time and consulting basis. If you're interested in a role where top performance is rewarded, personal time is valued, and excellence is demanded at every level we want to talk to you today!

Where do you want to go? We've got the keys! ~ KēSTA I.T.