What are the responsibilities and job description for the Information Security Governance, Risk & Compliance (GRC) Analyst position at Cyquent, Inc.?
Job Title: Information Security Governance, Risk & Compliance (GRC) Analyst
Location: Rockville, MD (Hybrid/Onsite)
Job Type: Contract / Full Time
Client: Direct Client
Certificates are mandatory to Submit.
Required Qualifications
- Bachelor''''s degree in Cybersecurity, Information Systems, Information Technology, Computer Science, Business Information Systems, or a related field.
- Minimum 3 year of experience in Information Security, Cybersecurity, Governance, Risk & Compliance (GRC), Risk Management, IT Audit, Compliance, or Information Technology.
- entry level candidates with relevant internships are encouraged to apply.
Required Skills
- ServiceNow (IRM preferred)
- Governance, Risk & Compliance (GRC)
- Information Security
- Risk Management
- Information Security Policy Exceptions
- Enterprise Risk Register
- Risk Analysis & Risk Assessment
- Cybersecurity Principles
- NIST Cybersecurity Framework (CSF)
- Microsoft Office 365
- Technical Documentation
- Customer Service
- Excellent Written & Verbal Communication
Responsibilities
- Administer Information Security Policy Exception requests.
- Perform risk assessments and document findings.
- Maintain the Enterprise Risk Register using ServiceNow IRM.
- Track risk mitigation activities, approvals, and documentation.
- Generate reports, dashboards, and risk metrics.
- Collaborate with IT teams, business stakeholders, and Information Security leadership.
Preferred Certifications
- CompTIA Security
- CISM Fundamentals (CISM-F)
- NIST Cybersecurity Framework (NCSF) Practitioner
- ISACA IT Risk Fundamentals
- ISACA Cybersecurity Audit Certificate
- HIPAA Security/Compliance Certification