Senior Cybersecurity GRC Analyst

🔥 0 minutes ago

🇺🇸 United States – Remote

⏰ Full Time

🟠 Senior

🎲 Risk

👻 Ghost score 10%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

SAIC

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1969

☁️ SaaS

📣 Marketing

🏢 Enterprise

💰 $500M Post-IPO Debt - SAIC on 2025-09

SaaS • Marketing • Enterprise

SAIC is represented in the supplied content by marketing and product copy that matches Bitly — a cloud-based link management and QR-code platform. The material describes a SaaS offering for URL shortening, dynamic QR Codes, link analytics, mobile-friendly landing pages, branded links, UTM campaign tracking, digital business cards, developer APIs and AI-enhanced features. It targets marketers, developers, and enterprises across industries (retail, CPG, hospitality, media, healthcare, finance, education) and emphasizes integrations, analytics, and enterprise-grade capabilities. Note: the provided text appears to be Bitly’s website content rather than information about SAIC; if you intended the defense/technology firm SAIC (Science Applications International Corporation), please provide relevant content.

📋 Description

• Maintain current awareness of cybersecurity trends and threats to inform risk mitigation strategies • Assist with application and system/infrastructure risk assessments and reassessments; document results and track remediation to closure • Conduct third-party/vendor risk assessments and collaborate with procurement, legal, and business owners on risk treatment • Conduct supply chain risk management risk and compliance assessments • Assist with operational cyber activities, including Carbon Black application whitelisting reviews, international travel requests and violations, and software assessments/evaluations • Select, implement, and assess security controls per NIST SP 800-171; validate effectiveness • Drive continuous monitoring using NIST SP 800-39; maintain dashboards and key risk indicators • Manage vulnerability and penetration test findings; coordinate remediation with system owners within SLAs • Author and maintain risk management program documentation; prepare audit evidence and participate in internal/external audits • Recommend updates to cybersecurity policies, standards, and procedures based on control gaps and remediation outcomes • Develop and deliver training and guidance to stakeholders • Assist with configuration and maintenance of GRC tooling such as ServiceNow GRC for workflow, evidence management, and reporting • Collaborate across security, IT, and business teams; escalate material risks to senior leadership with clear risk statements and options

🎯 Requirements

• Bachelor’s degree in Information Technology or similar discipline and 5 years of experience, or Master’s Degree and 3 years of experience • An additional 4+ years of experience may be considered in lieu of a degree • Certifications such as CISA, CISSP, CISM, or Security+ • Comprehensive understanding and applied experience with cybersecurity frameworks and regulations, including NIST RMF, NIST SP 800-53/171, ISO/IEC 27001, COBIT, COSO, MITRE, ITIL, HITRUST, and SOC reporting • Ability to categorize systems and information per FIPS 199 and NIST SP 800-60 • Strong analytical skills; ability to synthesize complex information and defend independent judgments • Excellent written and verbal communication; ability to translate technical risk into business-focused language and narratives • Strategic and self-directed work style with effective collaboration and negotiation across diverse stakeholders • Demonstrated ability to manage multiple projects, prioritize based on urgency and impact, and meet deadlines • Working knowledge of ServiceNow and/or other GRC tools • Working knowledge of security tools for vulnerability scanning, DLP, endpoint protection, etc. • Technical proficiency in Cybersecurity

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume