Engineer L2
Core
Develop, implement, and maintain cybersecurity policies, standards, and procedures to manage and mitigate risks while ensuring compliance with industry frameworks and regulations.
Role type
Cybersecurity GRC Analyst
Builds
Internal security policies, risk registers, compliance documentation, and audit evidence repositories
Domain
Cybersecurity, Governance, Risk, and Compliance (GRC)
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Risk assessment, security control evaluation, compliance auditing, policy development, regulatory knowledge (NIST CSF, ISO 27001, CIS Controls, SOC 2), third-party risk management, DLP policy management, security metrics reporting
Preferred skills
Incident response, application security, KPI/KRI development, multi-project management
Technologies
Zscaler, NIST CSF, ISO 27001, CIS Controls, SOC 2, NIST 800-53, FAIR
Responsibilities
Develop and maintain cybersecurity policies and procedures; Conduct risk assessments and gap analyses; Support internal and external audits; Manage third-party risk assessments; Track and report on security risks and compliance metrics; Provide cybersecurity awareness training
Seniority
Mid-level, hands-on IC
