GRC Security Analyst

TEKsystems•Columbia, MD

1d•$55 - $60•Hybrid

About The Position

The Information Security Analyst II (GRC) provides support for Governance, Risk, and Compliance activities aligned to NIST CSF, NIST SP 800-53, HIPAA Security Rule, and HITRUST CSF, PCI-DSS. The role supports risk assessments, audit readiness, control validation, and policy governance. The immediate project this person will be working on is a refresh/rebuild of their baseline security policies and to support Third Party Risk Management.

Requirements

3-5 years of experience in information security, risk, or compliance
Bachelor's degree in systems/ IT Security related field
Knowledge of NIST CSF, NIST 800-53, HIPAA, and HITRUST, PCI-DSS
Strong analytical, documentation, and communication skills
Ability to work collaboratively across teams.
Self-Driven Ability to manage tasks and organize project work

Nice To Haves

Certified in CISSP, CISM or CRISC ISACA preferred
HIPAA and HI-TRUST experience is highly desired
Security Analyst
Contract alignment
Implementing Security controls
Risk Management 3rd party risk management program
Governance and Risk Management

Responsibilities

Support compliance initiatives aligned to NIST, HIPAA, and HITRUST, PCI-DSS frameworks
Assist in maintaining control mappings and compliance documentation
Perform control testing and support evidence collection for audits
Support HITRUST certification readiness activities
Support enterprise cyber-risk management activities
Execute and oversee the third-party risk management process
Maintain and update the risk register and track remediation
Support responses to third-party security questionnaires. Support contract review tasks in support of Cyber and Data security language.
Assist with development and maintenance of security policies and standards
Maintain audit documentation repositories
Support reporting on compliance metrics and KPIs
Collaborate with cross-functional teams to address risk and compliance gaps