Security Analyst

Job Summary

A company is looking for a Security Analyst to join their cybersecurity team.

Key Responsibilities

• Lead testing of internal controls across various cybersecurity frameworks
• Maintain and update the cybersecurity risk register and conduct risk assessments
• Manage the vendor security review process and optimize GRC platforms

Required Qualifications

• 3-5 years of experience in cybersecurity, GRC, IT audit, or risk-focused security roles
• Hands-on experience with controls testing, vendor security reviews, and risk assessments
• Familiarity with frameworks like NIST CSF, SOC2, and PCI DSS
• Experience with GRC tools such as Drata or OneTrust
• Basic knowledge of cloud platforms like AWS