Cybersecurity GRC Analyst
Core
Develop, implement, and maintain cybersecurity policies, standards, and procedures; conduct risk assessments and compliance audits to ensure alignment with regulatory frameworks.
Role type
Cybersecurity GRC Analyst
Builds
Cybersecurity policies, risk registers, compliance documentation, and audit evidence repositories
Domain
Climate technology / HVACR / Cold chain logistics
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Risk assessment, control evaluation, compliance auditing, policy development, regulatory knowledge (NIST CSF, ISO 27001, CIS Controls, SOC 2), third-party risk management, DLP strategy oversight, risk reporting
Preferred skills
KPI/KRI development, incident response experience, application security experience, multi-project management
Technologies
Zscaler, NIST CSF, ISO 27001, CIS Controls, SOC 2, FAIR, NIST 800-53
Responsibilities
Develop and maintain cybersecurity policies and procedures; Conduct risk assessments and gap analyses; Support internal and external audits; Manage third-party risk assessments; Track and report on cybersecurity metrics; Provide cybersecurity awareness training; Manage DLP policies for endpoint, network, and cloud
Seniority
Mid-level, hands-on IC
