Security Analyst - GRC

TEKsystems•Nashville, TN

1d•$50 - $65•Onsite

About The Position

Our client's Cyber Risk Management team is seeking a resource to support the execution and maturation of the enterprise cyber risk program. This role focuses on risk acceptance facilitation, executive communication, qualitative risk analysis, and risk register lifecycle management. This role would also have an opportunity to help design and provide input to the direction of the cyber risk program through several process improvement workstreams occurring throughout 2026. The ideal candidate provides an external perspective and contributes to both execution and process improvement.

Requirements

Compliance
GRC
Cyber Risk
FAIR
NIST
ISO27001
ServiceNow IRM

Nice To Haves

Prior experience with FAIR (Factor Analysis of Information Risk).
Familiarity with ISO 27001, NIST, or similar frameworks.
Experience with ServiceNow IRM or similar GRC platforms.
Relevant certifications (CISSP, CISA, CISM, CRISC).

Responsibilities

Facilitate risk acceptance and awareness discussions with leadership; translate technical risks into business terms.
Develop executive-ready presentations and proactively anticipate leadership questions and data needs.
Maintain and track the cyber risk register, including follow-up on remediation actions and acceptance decisions.
Perform qualitative risk analysis (likelihood and impact) using scenario-based models.
Evaluate control effectiveness and compensating controls; provide risk-based recommendations.
Support and contribute to the design and improvement of the cyber risk management program and associated processes.