Security GRC Analyst

Protective Life

Security Risk Analyst executing cyber risk functions like regulatory compliance and security awareness. Ensuring adherence to regulatory requirements and collaborating with compliance, legal, and technology teams.

Posted 7/23/2026full-timeRemote • 🇺🇸 United StatesJunior💰 $70,000 - $77,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in enterprise risk assessments and governance, risk, and compliance (GRC) frameworks, with a strong focus on NIST CSF, NIST 800-53, and SOC 2. Proficient in developing security awareness programs and managing third-party risk assessments while utilizing Agile methodologies for effective execution.

Highest-signal resume keywords

Enterprise Risk AssessmentGovernance, Risk, And Compliance (GRC)Third-Party Risk Management (TPRM)Security Awareness Program DevelopmentAgile Methodologies

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

NIST CSFNIST 800-53SOC 2CISVulnerability AssessmentRisk ManagementAudit ProcessesSecurity ToolsIS GRC Program EffectivenessControl Environments

Soft Skills

Organizational AbilitiesAnalytical SkillsMultitasking Abilities

Tools & Technologies

ServiceNowArcherSharePointPower BI

Industry Keywords

CybersecurityComplianceRegulatory FrameworksRisk Reduction InitiativesContinuous Improvement

Tech Stack

Tools & technologies

Cyber SecurityServiceNow

About the role

Key responsibilities & impact

Perform and mature enterprise risk assessments using frameworks such as NIST CSF, NIST 800-53, SOC 2, and CIS
Analyze vulnerability assessment reports to support troubleshooting, remediation, and risk reduction initiatives
Develop and execute security awareness programs, including training, phishing simulations
Deliver actionable reporting and insights, including assessment results and GRC metrics
Perform end-to-end cyber third-party risk assessments
Drive process and tooling optimization
Support governance and control management
Enable audit readiness and due diligence
Stay current on evolving regulations, frameworks, and industry trends
Manage priorities and execution using Agile methodologies

Requirements

What you’ll need

Bachelor’s degree in Cybersecurity, Information Systems, or related field. 1–3 years of experience in GRC, risk management, or compliance within cybersecurity.
Working knowledge of regulatory frameworks, audit processes, and control environments
Understanding of third-party/vendor risk management (TPRM) processes and enterprise risk concepts
General knowledge of security tools and controls across domains such as network security, endpoint protection
Proven ability to track, measure, and report on IS GRC program effectiveness using tools such as ServiceNow, Archer, SharePoint, and Power BI
Experience contributing to continuous improvement of GRC programs
Experience developing and delivering training materials
Strong organizational, analytical, and multitasking abilities

Benefits

Comp & perks

comprehensive health, dental and vision insurance
mental health benefits
employee assistance program
paid time off
paid parental leave
short-term disability
cultural observance day
contributions to healthcare accounts
pension plan
401(k) plan with Company matching
ProHealth Rewards