Senior Cybersecurity and GRC Analyst
Core
Monitor and protect systems, find vulnerabilities, and close risks while supporting SOC 2, ISO/IEC 27001, and ISO/IEC 27701 compliance.
Role type
Senior hands-on cybersecurity and GRC analyst
Builds
Secure cloud, network, endpoint, and application environments; maintain audit-ready security documentation
Domain
Cybersecurity, Governance, Risk, and Compliance (GRC)
Required skills
Vulnerability management, incident response, threat investigation, security monitoring, access oversight, risk assessment, security controls tuning, security awareness training, security questionnaire completion, penetration test coordination, audit evidence preparation
Preferred skills
Cloud security, network security, endpoint security, identity security, application security, SIEM, EDR, bug bounty program management
Technologies
AWS security services, log monitoring tools, endpoint management tools, vulnerability scanning tools, SIEM, EDR
Responsibilities
Plan and coordinate cybersecurity activities; monitor and triage security alerts; investigate suspicious activity; run vulnerability scans and triage findings; oversee user access and privileged accounts; assess cybersecurity risks; recommend and monitor security controls; respond to security incidents; run security awareness training and phishing simulations; complete security questionnaires; arrange penetration tests; supply technical evidence for audits; run risk management meetings and maintain risk registers
Seniority
Senior, hands-on IC
