Cybersecurity GRC Tool Analyst Job at Hewlett Packard Enterprise

New

Cybersecurity Analyst

We are looking for a Cybersecurity Analyst to support vulnerability management, ...

Location

United States , Jacksonville

Salary:

Not provided

Robert Half

Expiration Date

Until further notice

Requirements

3+ years of cybersecurity experience
Experience with vulnerability management tools
Knowledge of security frameworks and best practices
Strong analytical and documentation skills

Job Responsibility

Perform vulnerability assessments and remediation tracking
Review security findings and recommend corrective actions
Support security governance and compliance efforts
Investigate security events and incidents
Collaborate with infrastructure and development teams
Maintain security documentation and reporting metrics

What we offer

Medical
vision
dental
life and disability insurance
401(k) plan

Senior Analyst, Cybersecurity Compliance

The Cybersecurity Compliance – Information Lifecycle Management (ILM), Export & ...

Location

United States , Austin, Texas; Warren, Michigan

Salary:

Not provided

General Motors

Expiration Date

Until further notice

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Information Technology, Risk Management, or a related field
Minimum 7 years of experience in cybersecurity, GRC, risk management, audit, or related compliance roles, preferably in a large, global organization
Demonstrated experience with cybersecurity risk and compliance frameworks (e.g., NIST CSF, NIST 800‑53, ISO 27001, CIS) and enterprise risk/compliance frameworks (e.g., FAIR, ERM, COSO)
Familiarity with legal and regulatory requirements impacting cybersecurity, data, and export controls (e.g., SOX, PCI‑DSS, GDPR, CCPA, export regulations, records/retention requirements)
Understanding of incident response, vulnerability management, and business continuity processes and how they intersect with compliance obligations
Experience managing or supporting GRC software tools and platforms (preferably ServiceNow IRM), including workflows, control libraries, and reporting
Excellent communication, presentation, and interpersonal skills
able to translate technical compliance topics into concise, executive‑ready messages
Proven ability to manage multiple complex initiatives, prioritize effectively, and work both independently and collaboratively in a matrixed environment

Job Responsibility

Implement and maintain a comprehensive cybersecurity compliance program for ILM, Export, and BCP that is aligned to the NIST Cybersecurity Framework (NIST CSF)
Conduct regular compliance assessments of ILM, Export, and BCP controls, evaluating inherent and residual risk across these domains
Analyze and prioritize identified issues based on compliance impact and likelihood
recommend risk treatment strategies and control enhancements
Monitor and track mitigation activities to closure, assessing impacts to residual compliance risk and recommending adjustments to the unified control set
Design, operate, and continuously improve the ILM control framework, ensuring alignment with corporate ILM policy, data classification standards, retention schedules, and privacy requirements
Define and document control requirements for data creation, classification, retention, archival, and destruction across key systems and repositories
Establish and manage ILM attestation processes with ILM Coordinators, application owners, and business stakeholders to confirm control design and operating effectiveness
Partner with Legal, Privacy, and Records Management to ensure ILM controls support litigation hold, regulatory, and privacy obligations
Translate Export Control policy and regulatory obligations into practical, testable controls across IT and Cyber environments

Fulltime

IT GRC Analyst

We are partnering with a growing IT team in Austin to hire a dedicated IT GRC An...

Location

United States , Austin

Salary:

Not provided

Robert Half

Expiration Date

Until further notice

Requirements

Minimum of 3 years of experience in IT governance, risk management, and compliance
Proficiency in NIST frameworks and cybersecurity compliance practices
Experience with Service Organization Control (SOC) reporting and auditing
Strong analytical skills and attention to detail in evaluating systems and processes
Ability to manage multiple projects and prioritize tasks effectively
Excellent verbal and written communication skills for reporting and collaboration
Familiarity with risk management tools and methodologies
Bachelor’s degree in Information Technology, Computer Science, or a related field

Job Responsibility

Develop and implement governance frameworks to ensure alignment with NIST and other cybersecurity standards
Conduct regular assessments to monitor compliance with Service Organization Control (SOC) requirements
Collaborate with cross-functional teams to identify risks and propose mitigation strategies
Create detailed reports on compliance performance and recommend process improvements
Maintain documentation of cybersecurity policies and procedures for audit readiness
Monitor and evaluate data systems to identify vulnerabilities and ensure adherence to security protocols
Provide guidance and training to team members on governance and compliance best practices
Participate in audits and respond to inquiries related to cybersecurity compliance
Research and stay updated on industry trends to enhance governance strategies
Support the integration of new technologies while maintaining compliance with established standards

What we offer

medical
vision
dental
life and disability insurance
401(k) plan

Fulltime

Senior GRC Analyst

We are seeking an experienced Senior Governance, Risk, and Compliance (GRC) Anal...

Location

United States , Chapel Hill

Salary:

Not provided

Blume Global

Expiration Date

Until further notice

Requirements

5+ years of hands-on experience in GRC, preferably with a focus on acquisition integration
Strong knowledge of regulatory compliance requirements, risk management frameworks, including ISO 27001, NIST
Experience with SOC1/2, GDPR, and privacy frameworks
Proficiency in information security tools, techniques, and controls
Experience with metrics and KPIs to measure and track information security risk
Ability to develop policies, standards, and guidelines
ISO27001:2022 Lead Implementer, and lead auditor certifications are a must
CISA, CISM, CISSP, or CRISC certifications are desirable
Experience with GRC tools, such as Vanta, Archer, ServiceNow Risk modules is highly desirable
Exposure to CMMC/FedRAMP is highly desirable

Job Responsibility

Acquisition Assessment: Collaborate with cross-functional teams to assess the GRC landscape of newly acquired companies, identifying gaps and alignment opportunities
Integration Planning: Develop comprehensive integration plans tailored to each acquisition, ensuring alignment with the company's overarching GRC strategy
Risk Management: Evaluate and mitigate risks associated with integration processes, working closely with risk management teams
Policy and Procedure Harmonization: Bridge gaps between existing practices and those of acquired entities, harmonizing policies, procedures, and controls
Communication and Stakeholder Management: Effectively communicate integration plans and progress, fostering strong relationships with key stakeholders
Reporting and Documentation: Maintain accurate documentation of integration activities and generate insightful reports for senior management
Continuous Improvement: Identify areas for improvement and drive enhancements to the integration process
Customer Security Questionnaire Support: Collaborate with various teams to ensure accurate and comprehensive responses to customer security questionnaires

Senior GRC Analyst

We are seeking an experienced Senior Governance, Risk, and Compliance (GRC) Anal...

Location

United Kingdom , London

Salary:

Not provided

Blume Global

Expiration Date

Until further notice

Requirements

5+ years of hands-on experience in GRC, preferably with a focus on acquisition integration
Strong knowledge of regulatory compliance requirements, risk management frameworks, including ISO 27001, NIST
Experience with SOC1/2, GDPR, and privacy frameworks
Proficiency in information security tools, techniques, and controls
Experience with metrics and KPIs to measure and track information security risk
Ability to develop policies, standards, and guidelines
ISO27001:2022 Lead Implementer and lead auditor certifications are a must
CISA, CISM, CISSP, or CRISC certifications are desirable
Experience with GRC tools, such as Vanta, Archer, ServiceNow Risk modules is highly desirable
Exceptional communication and interpersonal skills

Job Responsibility

Acquisition Assessment: Collaborate with cross-functional teams to assess the GRC landscape of newly acquired companies, identifying gaps and alignment opportunities
Integration Planning: Develop comprehensive integration plans tailored to each acquisition, ensuring alignment with the company's overarching GRC strategy
Risk Management: Evaluate and mitigate risks associated with integration processes, working closely with risk management teams
Policy and Procedure Harmonization: Bridge gaps between existing practices and those of acquired entities, harmonizing policies, procedures, and controls
Communication and Stakeholder Management: Effectively communicate integration plans and progress, fostering strong relationships with key stakeholders
Reporting and Documentation: Maintain accurate documentation of integration activities and generate insightful reports for senior management
Continuous Improvement: Identify areas for improvement and drive enhancements to the integration process
Customer Security Questionnaire Support: Collaborate with various teams to ensure accurate and comprehensive responses to customer security questionnaires

Senior GRC Analyst

We are seeking an experienced Senior Governance, Risk, and Compliance (GRC) Anal...

Location

United States , Chicago

Salary:

90000.00 - 130000.00 USD / Year

Blume Global

Expiration Date

Until further notice

Requirements

5+ years of hands-on experience in GRC, preferably with a focus on acquisition integration
Strong knowledge of regulatory compliance requirements, risk management frameworks, including ISO 27001, NIST
Experience with SOC1/2, GDPR, and privacy frameworks
Proficiency in information security tools, techniques, and controls
Experience with metrics and KPIs to measure and track information security risk
Ability to develop policies, standards, and guidelines
ISO27001:2022 Lead Implementer and lead auditor certifications are a must
CISA, CISM, CISSP, or CRISC certifications are desirable
Experience with GRC tools, such as Vanta, Archer, ServiceNow Risk modules is highly desirable
Exposure to CMMC/FedRAMP is highly desirable

Job Responsibility

Acquisition Assessment: Collaborate with cross-functional teams to assess the GRC landscape of newly acquired companies, identifying gaps and alignment opportunities
Integration Planning: Develop comprehensive integration plans tailored to each acquisition, ensuring alignment with the company's overarching GRC strategy
Risk Management: Evaluate and mitigate risks associated with integration processes, working closely with risk management teams
Policy and Procedure Harmonization: Bridge gaps between existing practices and those of acquired entities, harmonizing policies, procedures, and controls
Communication and Stakeholder Management: Effectively communicate integration plans and progress, fostering strong relationships with key stakeholders
Reporting and Documentation: Maintain accurate documentation of integration activities and generate insightful reports for senior management
Continuous Improvement: Identify areas for improvement and drive enhancements to the integration process
Customer Security Questionnaire Support: Collaborate with various teams to ensure accurate and comprehensive responses to customer security questionnaires

Fulltime

Grc Analyst – Public Sector

Socure is seeking an Analyst, GRC – Public Sector to execute and enhance the com...

Location

United States

Salary:

95000.00 - 115000.00 USD / Year

Socure

Expiration Date

Until further notice

Requirements

5+ years of cybersecurity or identity management experience, including 1+ year in the public sector
Direct experience with FedRAMP, GovRAMP, and NIST frameworks (800-53, 800-63, 800-171)
Proven ability to manage continuous monitoring, vulnerability remediation, and compliance reporting
Experience using AI tools (e.g., ChatGPT, Glean, Gemini) and machine-readable formats (e.g., OSCAL) to automate and streamline compliance processes
Strong communication, organization, and collaboration skills with the ability to manage multiple priorities
Ability to adapt to changing requirements
Must be a U.S. Person (U.S. Citizens or U.S. Permanent Residents) residing in the United States and be able to obtain a U.S. OPM NACI clearance

Job Responsibility

Day-to-day coordination and execution of external Third Party Assessment Organization (3PAO) assessments and responding to auditor requests for evidence and documentation
Maintain and update FedRAMP and GovRAMP controls and documentation in alignment with organizational and regulatory requirements
Prepare certification and authorization packages and maintain related documentation such as the System Security Plan (SSP) and associated appendices
Lead the day-to-day FedRAMP continuous monitoring process including vulnerability management lifecycle
Coordinate recurring continuous monitoring compliance activities such as access reviews, incident response exercises, and contingency plan testing
Oversee access controls for FedRAMP environments
Design, implement and deliver FedRAMP training programs
Create and manage automated workflows to improve efficiency
Maintain compliance evidence repositories
Conduct internal reviews of logged events and control activities

What we offer

Equity
Comprehensive benefits
Annual discretionary performance bonus or commissions plans

Fulltime

GRC Analyst

A GRC Analyst within the Cyber Governance, Risk, and Compliance (GRC) team is a ...

Location

United States , Las Vegas; Austin

Salary:

119932.00 - 222732.00 USD / Year

Aristocrat Gaming

Expiration Date

Until further notice

Requirements

Master’s degree and 2 years of experience in cybersecurity field
University / bachelor’s degree and 4 years’ experience in cybersecurity field
Associate’s degree and 8 years' experience in cybersecurity field
Experience in Learning and Development or Communications is a plus
Experience in policy management lifecycle management from creation to communication to delivery
Working knowledge of cybersecurity awareness training terminology such as phishing, smishing, ransomware, etc.
Experience designing and deploying corporate-level awareness programs
Ability to create and deliver on strategic needs for awareness and training program
Experience in using Artificial Intelligence (AI) tools to create, refine, personalize, and deliver training content
Comprehensive and effective communication skills

Job Responsibility

Maintain and continuously improve the cybersecurity Policies Program
Process and assess risk exceptions to Aristocrat Security Policies, Standards, and Technical Security Requirements
Manage and advance a Security Awareness and Training Program
Continuously deliver maturity enhancements to the Security Awareness program using AI tools
Create role-based training curriculum across the organization focusing on the protection of resources and data

What we offer

health, dental, and vision insurance
paid time off
401(k) plan with employer matching

Fulltime

Select Country

Cybersecurity GRC Tool Analyst

Job Description

Job Responsibility

Requirements

Nice to have

What we offer

Looking for more opportunities?