Information Security Governance, Risk & Compliance (GRC) Analyst

Job Title:  Information Security Governance, Risk & Compliance (GRC) Analyst

Location:  Rockville, MD (Hybrid/Onsite)

Job Type:  Contract / Full Time

Client: Direct Client

Certificates are mandatory to Submit.

Required Qualifications

• Bachelor''s degree in Cybersecurity, Information Systems, Information Technology, Computer Science, Business Information Systems, or a related field.
• Minimum 3+ year of experience in Information Security, Cybersecurity, Governance, Risk & Compliance (GRC), Risk Management, IT Audit, Compliance, or Information Technology.
• entry level candidates with relevant internships are encouraged to apply.

Required Skills

• ServiceNow (IRM preferred)
• Governance, Risk & Compliance (GRC)
• Information Security
• Risk Management
• Information Security Policy Exceptions
• Enterprise Risk Register
• Risk Analysis & Risk Assessment
• Cybersecurity Principles
• NIST Cybersecurity Framework (CSF)
• Microsoft Office 365
• Technical Documentation
• Customer Service
• Excellent Written & Verbal Communication

Responsibilities

• Administer Information Security Policy Exception requests.
• Perform risk assessments and document findings.
• Maintain the Enterprise Risk Register using ServiceNow IRM.
• Track risk mitigation activities, approvals, and documentation.
• Generate reports, dashboards, and risk metrics.
• Collaborate with IT teams, business stakeholders, and Information Security leadership.

Preferred Certifications

• CompTIA Security+
• CISM Fundamentals (CISM-F)
• NIST Cybersecurity Framework (NCSF) Practitioner
• ISACA IT Risk Fundamentals
• ISACA Cybersecurity Audit Certificate
• HIPAA Security/Compliance Certification