Cyber Analyst

Goosehead Insurance•Westlake, OH

About The Position

Goosehead Insurance is seeking a Cybersecurity Analyst to help protect the company’s data, systems, and infrastructure. The analyst will assess security controls, manage vendor risk, and collaborate with internal teams to support compliance with regulatory requirements. The role involves security monitoring and incident response, vulnerability and risk assessments, cybersecurity policy maintenance, Governance, Risk, and Compliance (GRC) work, audit support, and reporting on security and compliance matters.

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, or a related field.
2–5+ years of experience in cybersecurity, IT security, or related roles.
Proficiency with security tools such as SIEM, vulnerability scanners, and endpoint protection.
Understanding of frameworks such as NIST and MITRE ATT&CK, and common GRC standards.
Strong problem-solving, analytical, communication, and documentation skills.

Nice To Haves

Experience with GRC or compliance activities.
Certifications such as CompTIA Security+, CySA+, CEH, GIAC, CISA, CRISC, or CISSP; these are highly preferred.

Responsibilities

Monitor and analyze security alerts from SIEM, EDR, firewalls, network traffic, and other tools to detect intrusions, malware, and anomalous activity.
Investigate security incidents, determine root causes, and recommend remediation steps.
Conduct vulnerability assessments, support penetration testing, and evaluate risks to identify and prioritize threats.
Develop, review, and maintain cybersecurity policies, standards, and procedures aligned with industry frameworks and regulatory requirements.
Support GRC activities, including risk assessments, risk-register maintenance, compliance gap analyses, and mitigation-plan tracking.
Assist with internal and external compliance audits, evidence collection, vendor risk assessments, and remediation of findings.
Monitor and report on compliance metrics, regulatory changes, and risk trends; prepare reports on security events, GRC status, and metrics for management and audits.
Develop and implement security controls, policies, and procedures to protect networks, systems, and data.
Respond to and mitigate cybersecurity incidents, including containment, eradication, and recovery.
Collaborate with IT, legal, HR, and audit teams on security projects, awareness training, threat intelligence, and GRC initiatives.
Stay current on cyber threats, tools, regulatory developments, and best practices, and contribute to continuous improvement of security and compliance.