GRC Analyst

TEKsystems • Columbia, MD

7d • $55 - $60 • Hybrid

About The Position

The Information Security Analyst II (GRC) supports Governance, Risk, and Compliance activities aligned to NIST CSF, NIST SP 800-53, the HIPAA Security Rule, HITRUST CSF, and PCI-DSS. The role supports risk assessments, audit readiness, control validation, and policy governance. An immediate project is refreshing and rebuilding baseline security policies while supporting Third Party Risk Management.

This is a contract-to-hire position based in Columbia, Maryland, with a hybrid workplace arrangement. The stated pay range is $55.00–$60.00 per hour. Individual compensation depends on factors including qualifications, skills, relevant experience, job knowledge, geographic location, and internal equity. Eligibility requirements apply to some benefits, which may depend on job classification and length of employment. Benefits available for this temporary role may include medical, dental, and vision coverage; critical illness, accident, and hospital coverage; a 401(k) retirement plan; life insurance; short- and long-term disability; a Health Spending Account; transportation benefits; an Employee Assistance Program; and time off or leave.

Requirements

• 3–5 years of experience in information security, risk, or compliance.
• Bachelor's degree in a systems- or IT-security-related field.
• Knowledge of NIST CSF, NIST SP 800-53, HIPAA, HITRUST, and PCI-DSS.
• Strong analytical, documentation, and communication skills.
• Ability to work collaboratively across teams.
• Self-driven, with the ability to manage tasks and organize project work.

Nice To Haves

• CISSP, CISM, or CRISC certification is preferred.
• HIPAA and HITRUST experience is highly desired.
• Experience implementing security controls, third-party risk management, governance, and risk management.

Responsibilities

• Support compliance initiatives aligned to NIST, HIPAA, HITRUST, and PCI-DSS frameworks.
• Assist in maintaining control mappings and compliance documentation.
• Perform control testing and support evidence collection for audits.
• Support HITRUST certification readiness activities.
• Support enterprise cyber-risk management activities.
• Execute and oversee the third-party risk management process.
• Maintain and update the risk register and track remediation.
• Support responses to third-party security questionnaires.
• Support contract review tasks related to Cyber and Data security language.
• Assist with developing and maintaining security policies and standards.
• Maintain audit documentation repositories.
• Support reporting on compliance metrics and KPIs.
• Collaborate with cross-functional teams to address risk and compliance gaps.

Benefits

• Medical, dental, and vision coverage, subject to eligibility.
• Critical illness, accident, and hospital coverage, subject to eligibility.
• 401(k) retirement plan with pre-tax and Roth post-tax contributions, subject to eligibility.
• Voluntary life and AD&D insurance for the employee and dependents, subject to eligibility.
• Short- and long-term disability, subject to eligibility.
• Health Spending Account (HSA), subject to eligibility.
• Transportation benefits, subject to eligibility.
• Employee Assistance Program, subject to eligibility.
• Time off or leave, including PTO, vacation, or sick leave, subject to eligibility.

What This Job Offers

• Career Level: Mid Level