Security Analyst

Position Overview The Information Security Analyst II (GRC) provides support for Governance, Risk, and Compliance activities aligned to NIST CSF, NIST SP 800‑53, HIPAA Security Rule, HITRUST CSF, and PCI‑DSS. The role supports risk assessments, audit readiness, control validation, and policy governance. Essential Duties and Responsibilities Support compliance initiatives aligned to NIST, HIPAA, HITRUST, and PCI‑DSS frameworks Maintain control mappings and compliance documentation Perform control testing and support evidence collection for audits Support HITRUST certification readiness activities Support enterprise cyber‑risk management activities Execute and oversee the third‑party risk management process and respond to security questionnaires Maintain and update the risk register and track remediation Assist with development and maintenance of security policies and standards Maintain audit documentation repositories Support reporting on compliance metrics and KPIs Collaborate with cross‑functional teams to address risk and compliance gaps Minimum Requirements 3–5 years of experience in information security, risk, or compliance Bachelor’s degree in systems, IT security, or related field Certification in CISSP, CISM, or CRISC (ISACA preferred) Knowledge of NIST CSF, NIST 800‑53, HIPAA, HITRUST, and PCI‑DSS Strong analytical, documentation, and communication skills Ability to work collaboratively across teams Experience Level Intermediate Job Type and Location Contract to Hire, based in Columbia, MD (hybrid). Pay $55‑60/hr. Application Deadline Position anticipated to close on June 14, 2026. Equal Opportunity Employer The company is an equal opportunity employer and will consider all applications without regard to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law. Legal and Compliance Statements San Francisco Fair Chance Ordinance: For all positions located in the city and county of San Francisco, we will consider qualified applicants with arrest and conviction records. Massachusetts Lie Detector: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability. Use of Artificial Intelligence (AI): We may use AI to support parts of our hiring process, including sourcing, screening, and evaluating candidates. AI helps assess applications and qualifications, but final decisions are made by our hiring team. By applying, you acknowledge and agree that your application may be reviewed using AI tools. #J-18808-Ljbffr TEKsystems