SOC & GRC Security Analyst (Hybrid Onsite)

Job Title

SOC & GRC Security Analyst (Hybrid Onsite)

Dallas, TX

6 Months

Virtual / In-Person

In the Dallas office at least 3 days a week (Tues, Wed, Thurs)

We are seeking an experienced SOC Engineer with strong Governance, Risk, and Compliance (GRC) expertise to join our Cybersecurity team. The ideal candidate will have hands-on experience in Security Operations Center (SOC) monitoring, incident response, threat detection, vulnerability management, along with a solid understanding of ITGC, ISO 27001, GDPR, NIST Cybersecurity Framework, Third-Party Vendor Risk Management, and Risk Assessments.

Required Skills & Qualifications

GRC & Compliance Skills

Strong understanding of:

o IT General Controls (ITGC)

o ISO 27001

o GDPR

o NIST Cybersecurity Framework

o Risk Management Frameworks

o Third-Party/Vendor Risk Management

o Security Risk Assessments

o Audit Management and Compliance Reporting

Soft Skills

Strong analytical and problem-solving skills.

Excellent written and verbal communication skills.

Ability to interact with auditors, business stakeholders, and technical teams.

Experience preparing executive-level reports and presentations.

Deliverables:

-Process Flows

-Mentor and Knowledge transfer to client project team members

-Participate as primary, co and/or contributing author on any and all project deliverables associated with their assigned areas of responsibility

-Participate in data conversion and data maintenance

-Provide best practice and industry specific solutions

-Advise on and provide alternative (out of the box) solutions

-Provide thought leadership as well as hands on technical configuration/development as needed.

-Participate as a team member of the functional team

-Perform other duties as assigned.

Skills Required:

• Experience with SIEM platforms such as Microsoft Sentinel, Splunk, QRadar, or LogRhythm.

• Hands-on experience with EDR tools such as Microsoft Defender, CrowdStrike, or SentinelOne.

• Knowledge of network security, firewalls, IDS/IPS, email security, and endpoint protection.

• Experience in incident response, threat analysis, and vulnerability management.

• Understanding of MITRE ATT&CK framework and cyber kill chain concepts.

• Familiarity with cloud security concepts across Azure, AWS, or GCP.

Contact: Lokesh - View email address on us.fitly.work - Eight three two - Nine nine zero - Two four two six