GRC Analyst II

The Governance, Risk, and Compliance (GRC) Analyst II configures, implements, and manages security devices through strategic and technical security mitigation planning. This involves daily threat analysis and incident management.

Provide strategic and technical security mitigation planning and participate in the design, development, and maintenance of GRC activities aligned with NIST 800-171 Document and maintain GRC artifacts including process documentation, risk registers, and control mappings Develop, maintain, and track Plans of Actions and Milestones (POA&Ms), including remediation status and supporting evidence Participate in stakeholders interviews, working sessions, and documentation reviews to support GRC assessments Provide technical expertise in the development, maintenance, and enhancement of corporate security operating procedures, standards and best practices Assist with preparation for internal and external audits, assessments, and regulatory reviews, including evidence collection and response coordination

Experience: Bachelor's Degree Minimum two (2) years of experience in cybersecurity, technology risk, compliance, audit related roles. OR (6) years of experience may be considered in lieu of a Bachelors Degree. OR No experience required in lieu of Masters Degree. Experience supporting IT audits, risk assessments, or compliance assessments Working knowledge of CMMC controls, NIST 800-171 requirements, and compliance processes Hands-on experience developing and maintaining POA&Ms Ability to follow defined processes while managing multiple compliance-related tasks Ability to travel up to 10% Active Secret clearance or the ability to obtain and maintain Preferred: Experience performing NIST-based security or technology risk assessments Industry certifications such as CISA, CRISC, Security+, or similar credentials Strong written and verbal communication skills, particularly for documentation and audit response Detail-oriented with strong analytical and organizational skills