GRC Analyst

Kforce has a client in Oakwood, GA that is seeking a GRC Analyst. Key Responsibilities:

• Develop, update, and maintain practical cybersecurity policies and procedures
• Support cybersecurity initiatives aligned primarily with the CIS 18 Controls and related cybersecurity best practices
• Translate security policies into actionable technical and operational controls
• Actively monitor adherence to established cybersecurity policies and identify areas that require remediation
• Partner directly with infrastructure, security, application, and business teams to resolve security gaps
• Work with stakeholders to address issues such as patching, vulnerable devices, inappropriate services/configurations, and other situations that fall outside established security policy
• Support Business Continuity and Disaster Recovery initiatives
• Support emerging areas including AI governance and OT/ICS cybersecurity
• Operate independently, prioritize work, and drive issues through resolution without requiring significant day-to-day oversight
• Communicate technical security requirements effectively to both technical and non-technical stakeholders
• Build effective working relationships with teams across the organization to drive security improvements

Work with cybersecurity technologies supporting areas such as:

• Asset management
• Vulnerability management
• Endpoint security, including tools such as CrowdStrike
• Security logging and monitoring
• SIEM/security monitoring platforms

Requirements:

• Understand how to develop practical, basic cybersecurity policies; CIS 18 Controls are particularly relevant
• Experience implementing and enforcing those Cybersecurity policies; This is the biggest distinction from a traditional GRC analyst
• Understanding cybersecurity tools and operations
• Familiarity with asset management and vulnerability management tools
• Understanding of logging/monitoring tools and SIEM-type environments
• CrowdStrike was specifically mentioned as an example
• Enough technical depth to understand what the policy is governing and how it applies in the actual environment
• Ability to work independently
• Communicate and influence
• Strong interpersonal skills are important because the analyst may need cooperation from teams they do not directly manage