Cybersecurity Analyst

Qualifications Bachelor's degree in cybersecurity, information security, information assurance, or a related field, or an equivalent combination of education and experience. 5+ years of progressively responsible experience in governance, risk, compliance, or information security in a complex environment. Strong practical knowledge of security technologies and controls, as well as operating system platforms including Windows, macOS, Linux, and core networking technologies. Demonstrated experience with vulnerability management processes and tools, including scanning, reporting, prioritization, and remediation tracking. Solid understanding of threats, vulnerabilities, exploitation techniques, and how they map to business risk. Advanced experience with data analysis and reporting in Excel (pivot tables, lookups, intermediate/advanced formulas; scripting or macros a plus). Proven ability to assess and communicate the priority and business impact of vulnerabilities and risks to both technical and non-technical stakeholders. Excellent written and verbal communication skills, including experience drafting policies, standards, and executive-level summaries. One or more intermediate or advanced cybersecurity/GRC certifications such as CISSP, CISM, CISA, SecurityX, CCNP‑Security, or equivalent. Responsibilities Monitor the institution's information systems for security incidents and vulnerabilities, responding promptly to mitigate potential threats. Conduct regular risk assessments and security audits to identify weaknesses in the institution's cybersecurity posture and recommend remediation measures. Develop and implement security policies, procedures, and protocols to protect sensitive data and ensure compliance with regulatory requirements. Provide cybersecurity training and awareness programs for faculty, staff, and students to promote a culture of security within the institution. Analyze security incidents and breaches to determine their root causes and develop strategies to prevent future occurrences. Stay informed about emerging cybersecurity threats and trends, continuously updating security measures to address new challenges. Prepare and present reports on the status of cybersecurity efforts, highlighting incidents, vulnerabilities, and progress on remediation activities. Serve as a liaison with external agencies and partners on cybersecurity initiatives, collaborating on strategies to enhance the institution's security capabilities. Collaborate with IT teams to deploy security technologies, such as firewalls, intrusion detection systems, and encryption tools, to safeguard institutional data. Perform other duties as assigned. Skills Governance securities Windows macOS Linux Vulnerability assessment Vulnerability detection Data analysis nist cmmc rmf mitre fedramp Additional Responsibilities Serve as a primary point of contact for complex or sensitive cybersecurity and compliance inquiries from GTRI customers and leadership. Lead the development, review, and maintenance of: Enterprise-wide security policies, standards, practices, plans, and procedures, ensuring alignment with GTRI baseline cybersecurity requirements and University System of Georgia (USG) guidelines. Information technology risk assessments for systems, software, architectures, and configurations (compute, hardware/virtual, OS, storage, networking, security). Requests for changes to critical information systems and guide implementation of approved configuration changes. Cybersecurity documentation, including system security plans, and disaster recovery plans, and impact analyses (privacy, business, and security), ensuring completeness, accuracy, and currency. Validate security control implementation and configuration on systems to ensure compliance with requirements such as NIST, DFARS, CMMC, and related frameworks. Direct the creation and refinement of cybersecurity training content for GTRI personnel (e.g., security awareness, CUI training), ensuring alignment with current threats and regulatory expectations. Lead the development and ongoing improvement of departmental website content (articles, processes, procedures, FAQs, contacts, organizational charts, and team member information). Provide advanced support to the GRC Team service desk by resolving complex tickets and establishing standards and workflows for ticket triage and resolution. Lead or coordinate activities related to audits, assessments, and regulatory reviews, including evidence collection, policy review, and compliance analysis. Own or significantly contribute to the preparation and presentation of regulatory and compliance reports and dashboards, working with other units to ensure data completeness and accuracy. Experience Level Intermediate Level Job Type & Location Contract to Hire position based out of Atlanta, GA. Pay and Benefits Pay range $57.69 - $64.90/hr. Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to specific elections, plan, or program terms. If eligible, the benefits available for this temporary role may include the following: Medical, dental & vision Critical Illness, Accident, and Hospital 401(k) Retirement Plan - Pre-tax and Roth post-tax contributions available Life Insurance (Voluntary Life & AD&D for the employee and dependents) Short and long-term disability Health Spending Account (HSA) Transportation benefits Employee Assistance Program Time Off/Leave (PTO, Vacation or Sick Leave) Workplace Type Fully onsite position in Atlanta, GA. Application Deadline This position is anticipated to close on Jul 20, 2026. Equal Employment Opportunity Statement The company is an equal opportunity employer and will consider all applications without regards to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law. Pursuant to the San Francisco Fair Chance Ordinance, for all positions located in the city and county of San Francisco, we will consider for employment qualified applicants with arrest and conviction records. It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability. We may use Artificial Intelligence (AI) to support parts of our hiring process, including sourcing, screening, and evaluating candidates. AI helps assess applications and qualifications, but final decisions are made by our hiring team. By applying, you acknowledge and agree that your application may be reviewed using AI tools. #J-18808-Ljbffr