Cybersecurity Engineer - Hybrid

Genesis10•Fort Worth, TX

5h•Hybrid

About The Position

Genesis10 is seeking a GRC Analyst for a hybrid position with a Major Insurance Company in Fort Worth, TX. This is a 6+ month contract-to-hire opportunity. The Senior GRC Analyst is an experienced individual contributor within the IT Security function responsible for advancing Amynta's governance, risk management, and compliance (GRC) program. This role independently executes information security risk assessments, control oversight, and support for regulatory, audit, and customer assurance requirements. This is a Hybrid schedule with 3 days in Fort Worth, TX office on a set schedule. Under the guidance of Information Security leadership, this senior technical role is responsible for planning, developing, and maintaining security programs, policies, and procedures. The ideal candidate will help mature the organization's security program by addressing risks, managing vulnerabilities, and improving overall security posture. This position requires strong communication skills and the ability to manage multiple security responsibilities in a growing environment.

Requirements

Must reside within a reasonable commuting distance of the Fort Worth office.
Bachelor's degree in Information Systems, Information Security, Risk Management, Cybersecurity, or a related discipline; equivalent practical experience may be considered.
4–7 years of progressively responsible experience in information security, governance, risk and compliance (GRC), risk management, compliance, audit, or related IT security functions.
Proven experience supporting security, IT, or compliance audits (e.g., SOC, ISO, internal audit, regulatory examinations), including audit readiness, evidence collection, and remediation tracking.
Experience assessing information security risks, evaluating control effectiveness, and identifying compliance gaps.
Working knowledge of common security frameworks and regulatory standards such as NIST, ISO 27001, SOC, NYDFS Part 500, PCI-DSS, or similar frameworks.
Strong analytical, problem-solving, and organizational skills with the ability to manage multiple priorities independently.
Ability to communicate technical security concepts clearly to non-technical stakeholders and business leaders.
Excellent written and verbal communication skills, including clear and concise documentation.
Ability to work independently in a fast-paced environment with strong attention to detail.
Sound professional judgment and discretion when handling sensitive or confidential information.
Collaborative mindset with the ability to influence cross-functional stakeholders without direct authority.
Minimum of 3 years of experience in computer-related security
Experience in computer operations and security within the financial/insurance industry is preferred
Broad understanding of security technologies including firewalls, proxies, SIEM, antivirus software, and IDPs
Experience with incident response, vulnerability management, and overseeing a SOC team
Experience performing security reviews of hardware, applications, and software
Familiarity with security tools such as Microsoft Defender/XDR, Sentinel, AlertLogic, Crowdstrike Falcon, Rapid7 Insight VM, Abnormal Security, Burp Suite, or KnowBe4
In-depth knowledge of network protocols, operating systems, and common security vulnerabilities
Strong verbal and written communication skills
Ability to work independently and prioritize tasks in a fast-paced environment
Applicants must be authorized to work for ANY employer in the U.S. We are unable to sponsor or take over sponsorship of an employment Visa at this time

Nice To Haves

Professional certifications such as CISA, CRISC , CISSP, or ISO 27001 are preferred, but not required.

Responsibilities

Independently assess, analyze, and document information security risks across systems, applications, and technology‐enabled processes using a risk‐based approach.
Support and maintain the information security governance framework, including policies, standards, procedures, and control documentation.
Assess the design and operating effectiveness of security controls and provide risk‐based recommendations to Information Security leadership.
Monitor and report on adherence to internal security policies and applicable regulatory and contractual requirements.
Identify, track, and report control deficiencies and policy violations; partner with stakeholders to drive corrective actions.
Support internal and external audits, regulatory examinations, and customer assurance activities, including evidence coordination, audit responses, and remediation tracking.
Provide governance and coordination support for SOC 2 Type 2 assurance activities, including control readiness, internal testing, and auditor engagement.
Develop and maintain a centralized security knowledge base to streamline customer, partner, and due‐diligence responses.
Execute security awareness and training activities, including platform administration and phishing simulations.
Partner with IT, Legal, and business stakeholders to ensure security requirements are understood and incorporated into relevant processes.
Support the development and implementation of the IT vendor risk management program, including third‐party risk assessments and vendor risk tracking.
Contribute to continuous improvement of GRC processes, tooling, and reporting.
Perform other duties consistent with the scope of the role.
Assess and evaluate information security risks
Create and document processes in response to risks where required
Monitor computer networks, systems, and incoming emails for threats and security breaches
Install, configure, and update security software
Test systems for potential vulnerabilities and perform penetration testing
Develop systems and processes for security best practices
Prepare reports on security incidents and log responses to maintain compliance
Assist leadership with creating the framework for information security governance and compliance
Develop and maintain security policies and procedures
Train users and promote security awareness to ensure system and data security

Benefits

Access to hundreds of clients, most who have been working with Genesis10 for 5-20+ years.
The opportunity to have a career-home in Genesis10; many of our consultants have been working exclusively with Genesis10 for years.
Access to an experienced, caring recruiting team (more than 7 years of experience, on average.)
Behavioral Health Platform
Medical, Dental, Vision
Health Savings Account
Voluntary Hospital Indemnity (Critical Illness & Accident)
Voluntary Term Life Insurance
401K
Sick Pay (for applicable states/municipalities)
Commuter Benefits (Dallas, NYC, SF, and Illinois)