Cybersecurity / IAM Analyst I

Kforce has a client that is seeking a Cybersecurity/IAM Analyst I in Southlake, TX. Position Purpose: We are seeking a detail-oriented Experienced Cybersecurity Analyst to support cybersecurity, IT risk, and compliance activities within a healthcare environment, with a primary focus on SOX IT General Controls (ITGC) and NIST Cybersecurity Framework (NIST CSF) requirements. The role will assist with control assessments, audit evidence, remediation tracking, security monitoring, and compliance activities while helping protect sensitive healthcare, financial, and clinical information. Key Responsibilities:

• Support SOX ITGC auditing, including access reviews, IT operations, and related controls
• Collect, validate, and maintain audit evidence for internal and external audits
• Assist with control testing, documentation, exceptions, and remediation tracking
• Support NIST CSF control assessments, risk identification, and cybersecurity compliance activities
• Maintain control documentation, risk-control matrices, procedures, and audit records
• Collaborate with IT, Cybersecurity, Internal Audit, Finance, Engineering, Compliance, and Legal teams
• Support compliance requirements including SOX, NIST, and HIPAA as applicable
• Assist with security policies, procedures, awareness, and continuous control improvement

Requirements:

• 1-3 years of experience in cybersecurity, IT audit, IT risk, GRC, IT compliance, or a related field
• Hands-on experience supporting SOX IT General Controls (ITGC), including access controls, IT operations, change management, and control testing
• Experience conducting or supporting user access reviews, access certifications, provisioning/deprovisioning, privileged access, and segregation of duties
• Experience collecting, reviewing, validating, and maintaining audit evidence for internal and external audits
• Strong understanding of control testing, control deficiencies, exceptions, remediation plans, and issue tracking
• Experience developing and maintaining Risk & Control Matrices (RCMs), control narratives, procedures, and compliance documentation
• Working knowledge of the NIST Cybersecurity Framework (NIST CSF) and cybersecurity risk and control assessments
• Familiarity with HIPAA and cybersecurity requirements related to protecting sensitive healthcare, financial, and clinical information
• Experience collaborating with cross-functional teams including IT, Cybersecurity, Internal Audit, Finance, Engineering, Compliance, and Legal
• Strong analytical, organizational, and documentation skills with a high level of attention to detail