Cyber Analyst

Goosehead Insurance•Westlake, OH

About The Position

Goosehead Insurance is seeking a Cybersecurity Analyst to help protect the company’s data, systems, and infrastructure. The analyst will assess security controls, manage vendor risk, and collaborate with internal teams to support compliance with regulatory requirements. The position includes monitoring and investigating security alerts and incidents, assessing vulnerabilities and risk, developing security policies and controls, supporting governance, risk, and compliance activities, and reporting on security and compliance status. The analyst will also help improve the organization’s security and compliance posture as threats, tools, and regulations evolve.

Requirements

Bachelor's degree in Cybersecurity, Computer Science, or a related field.
2–5+ years of experience in cybersecurity, IT security, or related roles.
Proficiency with security tools, including SIEM, vulnerability scanners, and endpoint protection.
Understanding of frameworks such as NIST and MITRE ATT&CK, and common GRC standards.
Strong problem-solving, analytical, communication, and documentation skills.

Nice To Haves

Experience with GRC or compliance activities.
Certifications such as CompTIA Security+, CySA+, CEH, GIAC, CISA, CRISC, or CISSP are highly preferred.

Responsibilities

Monitor and analyze security alerts from tools such as SIEM, EDR, firewalls, and network traffic to detect intrusions, malware, or anomalous activity.
Investigate security incidents, determine root causes, and recommend remediation steps.
Conduct vulnerability assessments, support penetration testing, and evaluate risk to identify and prioritize threats.
Develop, review, and maintain cybersecurity policies, standards, and procedures in alignment with industry frameworks and regulatory requirements.
Support GRC activities, including risk assessments, maintaining the risk register, compliance gap analyses, and tracking mitigation plans.
Assist with internal and external compliance audits, evidence collection, vendor risk assessments, and remediation of findings.
Monitor and report on compliance metrics, regulatory changes, and risk trends; prepare reports on security events, GRC status, and metrics.
Develop and implement security controls, policies, and procedures to protect networks, systems, and data.
Respond to and mitigate cybersecurity incidents, including containment, eradication, and recovery.
Collaborate with IT, legal, HR, and audit teams on security projects, awareness training, threat intelligence, and GRC initiatives.
Stay current on cyber threats, tools, regulatory landscapes, and best practices, and contribute to continuous improvement of security and compliance.