19 cyber grc analyst jobs at 18 companies in United States
Senior Staff GRC Analyst
Austin, Texas, United States
$163k-$224k/yr OnsiteFull Time
7+ YOE7+ years in IT audit, GRC, security compliance or consulting; end-to-end Cyber Essentials/Plus ownership; hands-on endpoint/cloud security controls; familiarity with ISO 27001, SOC 2, NIST CSF; GRC platform proficiency; degree or equivalent experience.
Intune, Okta, AWS
Senior GRC Analyst
Boston, Massachusetts, United States
$130k-$170k/yr OnsiteFull Time
6+ YOE6+ years in cybersecurity or enterprise risk; experience conducting structured cyber/IT risk assessments, maintaining risk registers, familiarity with security frameworks and AI risk; strong communication and analysis skills.
NIST CSF, ISO 27001, PCI DSS, GDPR, HIPAA, NIST AI RMF, ISO/IEC 42001, FAIR
Cyber Security Analyst
United States
$90k-$100k/yr RemoteFull Time
3+ YOEU.S. citizen or permanent resident; bachelor's degree or equivalent experience; 3+ years as System Steward, ISSO, Cybersecurity Engineer, or RMF Specialist; knowledge of FISMA, NIST RMF, NIST SP 800-53 Rev. 5; experience with ServiceNow CAM, eMASS, or similar GRC tools; relevant certifications preferred.
ServiceNow CAM, eMASS, GRC tools
Sr Director Analyst, Cyber GRC Tools and Technology (Remote US)
United States or Texas
$172k-$203k/yr RemoteFull Time
12+ YOE5+ Mgmt12+ years in Cyber GRC/InfoSec/ERM with 5+ years leadership, expertise in Cyber GRC tools, strong research, writing, presentation and client engagement skills; willingness to travel up to 25%.
ServiceNow, Centraleyes, CyberSaint, EGERIE, LogicGate, Vanta
Senior Analyst, Cyber Governance, Risk and Compliance (GRC)
Coral Gables, Florida, United States
HybridFull Time
Bachelor's degree in Information Security, Cybersecurity, Computer Science, MIS, Engineering or related field, or equivalent experience; knowledge of security frameworks (NIST, ISO 27001, CIS); experience in GRC, risk assessments, or third-party risk management.
Sr. Classified Cyber Assurance Analyst
Hawthorne, California, United States
$130k-$195k/yr OnsiteFull Time
5+ YOEBachelor's degree or 7+ years managing classified cyber assurance; 5+ years supervising technical cyber assurance staff; active Top Secret clearance with SCI eligibility; DoD IAM Level III; CI polygraph; U.S. citizen or permanent resident; extended hours and travel.
Nessus, Splunk, Security Center, Service Now (SNOW), eMASS, GRC tools
Cyber Security Analyst
United States
$140k-$155k/yr RemoteFull Time
5+ YOEU.S. citizenship; 5+ years cybersecurity experience including 3+ years on federal systems; ATO package experience under NIST RMF; knowledge of NIST 800-53/37/171 and FISMA; DoD 8140/8570 IAM Level I or IAT Level II certification; bachelor's degree in cybersecurity or related field.
OneStream, GRC tool, Oracle Hyperion, SAP BPC, Anaplan
Cyber Compliance Analyst III
United States
OnsiteFull Time
5+ YOEBachelor's degree or equivalent experience and 5+ years in cybersecurity governance, GRC, compliance, risk, process improvement, or related work; requires analytics, workflow, reporting, and stakeholder skills.
Onspring, ServiceNow GRC/IRM, Archer, Hoxhunt, Proofpoint, KnowBe4, Microsoft Power BI, Microsoft Power Automate, Microsoft Power Apps, ServiceNow Flow Designer, Microsoft Visio, Lucidchart, Signavio, Bizagi, API, BPMN 2.0, SOC 1, SOC 2, PCI DSS, ISO 27001, NIST Cybersecurity Framework (CSF), CIS Controls, COBIT, AI
Sr Analyst, Cyber Security
New Britain, Connecticut, United States
HybridFull Time
3+ YOEBachelor's in related field, 3+ years in cybersecurity/IT audit/GRC, knowledge of NIST/ISO/PCI DSS/SOX/NIS 2, IT security audit experience, and professional certs (CISA/CISSP/CISM/CRISC) preferred.
ISO 27001, NIST, PCI DSS, SOX, NIS 2
Senior Cyber Issues Analyst
Alpharetta or Cincinnati
HybridFull Time
7+ YOE7+ years progressive experience in information security, cybersecurity risk management, or related; strong knowledge of NIST CSF, ISO/IEC 27001, CIS Controls, PCI DSS; hands-on GRC platform experience (e.g., Archer); ability to translate technical risk to business impact.
Archer, NIST CSF, ISO/IEC 27001, CIS Controls, PCI DSS
Senior Cyber Governance, Risk, Compliance Analyst
Rockville or Tysons
$112k-$203k/yr HybridFull Time
7+ YOEBachelor's degree in computer science, computer engineering, cybersecurity or related field preferred; 7+ years IT systems experience with cybersecurity emphasis; 3+ years AWS security controls; NIST RMF experience; GRC platform risk register experience.
AWS, NIST Risk Management Framework, GRC platform
Sr. Cyber Assurance Analyst, Finance
Hawthorne or Redmond +1 more
$130k-$195k/yr OnsiteFull Time
5+ YOERequires a high school diploma and 5+ years in cybersecurity compliance, audit, technical security, control testing, security standards, or risk management; relevant certifications preferred.
ERP, SIEM, CIS Benchmarks, STIGs, NIST, ISO 27001, GDPR, GRC
Sr. Cyber Risk 3rd Party Analyst
Cambridge, Massachusetts, United States
$146k-$234k/yr OnsiteFull Time
5+ YOE5+ years in cybersecurity risk management or GRC; experience with third-party risk reviews and GxP-regulated environments; strong communication; ability to use AI for risk analysis; U.S. person status required due to export control.
OneTrust, ServiceNow, Jira, Power BI, Microsoft Excel, Microsoft SharePoint
Staff Compliance Analyst
West Palm Beach or Florida
RemoteFull Time
8+ YOE8+ years in cyber security compliance, security risk, or audit; experience with at least three of ISO 27001, PCI, UK Cyber Essentials Plus, Spanish ENS, France HDS, TISAX, C5, SOC2; GRC system experience; relevant certifications like CISSP, CISA, CISM desirable.
GRC system
Governance, Risk & Compliance Analyst, Specialist
Malvern or Plano
HybridFull Time
5+ YOEFive years of information security or fraud experience, undergraduate degree or equivalent, expertise in NIST, CIS Controls, ISO 27002, GRC platforms, automation, and financial services cyber regulations.
NIST Cybersecurity Framework (NIST CSF), NIST 800-53, CIS Controls, ISO 27002, GRC, dashboards
Cybersecurity Risk Management Analyst
Philadelphia, Pennsylvania, United States
OnsiteFull Time
5+ YOERequires 5+ years in GRC technology, IT automation, or security platform engineering; ServiceNow IRM development; Python scripting; cyber risk, compliance, or audit experience; and a relevant bachelor's degree or equivalent.
ServiceNow, ServiceNow IRM, Python, API
Senior IT Controls Analyst
Boca Raton, Florida, United States
OnsiteFull Time
3+ YOEBachelor's degree in MIS, Information Security, Business, or equivalent; 3 years IT audit, cyber audit, security governance, risk, and compliance experience; valid driver's license; ability to travel up to 10% by air and vehicle.
SharePoint, Audit Board, SIEM, GRC
Governance, Risk and Compliance Analyst
Yardley, Pennsylvania, United States
OnsiteFull Time
3+ YOEBachelor's degree or equivalent experience; 3–5 years in cybersecurity, GRC, cyber risk, or third-party risk; experience with security assessments, vendor documentation, ISO 27001, NIST CSF, and SOC 2.
ISO 27001, NIST, SOC 2, LogicGate, ServiceNow GRC, Archer, OneTrust, AuditBoard, NIST AI RMF, ISO/IEC 42001
Manager, Technology and Cybersecurity Risk / Risk Data Analyst
Richmond, Virginia, United States
$109k-$169k/yr HybridFull Time
5+ YOERequires 5+ years in technology or cyber risk, risk management, GRC, or risk data analytics; bachelor's degree; Power BI, Excel, PowerPoint, automation, risk frameworks, and executive communication experience.
Microsoft Power BI, Microsoft Power Automate, Microsoft PowerPoint, Microsoft Excel, GRC tools, Archer, ServiceNow GRC, OneTrust, AWS, Azure, GCP, SQL, Python, PowerShell, API
Explore Jobs