GRC Security Analyst II
Core
Ensure security and integrity of information systems with a focus on risk, vulnerability management, and security compliance.
Role type
GRC Security Analyst II (Governance & Risk)
Builds
Enterprise-wide risk assessments, vulnerability remediation plans, compliance frameworks, and security awareness programs.
Domain
Utilities (Water/Wastewater & Natural Gas) / Cybersecurity & Risk Management
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Risk assessment, vulnerability management, compliance framework implementation, security awareness program development, stakeholder communication, quantitative/qualitative analysis, SDLC security integration, vendor risk assessment, incident response coordination
Preferred skills
RSA Archer platform experience, statistical analysis techniques, proactive threat intelligence monitoring
Technologies
Qualys, CIS-CAT, Active Directory, Office 365, Azure, PKI, cloud computing platforms
Responsibilities
Manage execution of enterprise-wide risk, threat, and vulnerability assessments; Analyze and prioritize risk findings to define remediation priorities; Define and manage metrics to measure success of security remediations; Lead ongoing vulnerability management processes; Participate in development of control/compliance frameworks based on ISO 27001/27002, NIST, COBIT; Work with teams to integrate security practices into SDLC; Lead or assist with vendor and 3rd party risk assessments; Create and maintain documentation of security solutions; Collaborate with engineers to manage risk related to emerging threats; Develop and deliver security awareness training programs; Implement and maintain controls for compliance and privacy; Act as liaison to internal and external audit teams
Seniority
Mid-level, hands-on IC
