[Hiring] IT Security Analyst @Smart IMS

Role Description

As an IT Security Analyst, you will support the organization's Cybersecurity Governance, Risk, and Compliance (GRC) program by leading security assessments, risk management activities, regulatory compliance reviews, third-party security evaluations, and governance initiatives. This role requires strong expertise in cybersecurity frameworks, compliance standards, risk analysis, auditing, and security governance to ensure enterprise systems and technologies remain secure, compliant, and aligned with organizational policies.

• Conduct security risk assessments, business impact analyses (BIA), data classification reviews, privacy assessments, and security control evaluations for systems, applications, and technology initiatives.
• Maintain risk registers, remediation plans, exception requests, evidence repositories, and compliance documentation using Archer GRC or similar platforms.
• Evaluate security controls against industry frameworks and regulatory requirements, including NIST 800-53, SEC530, CIS Controls, CJIS, HIPAA, PCI DSS, FERPA, and FTI.
• Partner with business and technical stakeholders to establish system ownership, data classification standards, and ongoing compliance requirements.
• Review vendor security documentation, SOC reports, security questionnaires, contracts, and third-party risk assessments.
• Support governance of interconnection agreements, MOUs, MOAs, NDAs, and data-sharing arrangements.
• Coordinate internal and external audits, assessments, compliance reviews, and remediation efforts.
• Develop and maintain security policies, standards, procedures, templates, and governance documentation.
• Support enterprise security awareness, compliance training, and stakeholder education initiatives.
• Conduct governance reviews for emerging technologies, including Artificial Intelligence (AI) solutions and cloud-based platforms.
• Assist with incident response governance, disaster recovery, business continuity planning, access reviews, and control assessments.
• Prepare executive-level reports, risk summaries, compliance metrics, and security program status updates.
• Provide security guidance to project teams, operational IT staff, procurement teams, business units, and vendors.

Qualifications

• 5+ years of experience in Cybersecurity Governance, Risk, and Compliance (GRC), information security, or related security disciplines.
• Strong knowledge of cybersecurity frameworks and standards including NIST 800-53, CIS Controls, VITA SEC530, CJIS, HIPAA, PCI DSS, FERPA, FTI, and privacy regulations.
• Experience conducting security risk assessments, control assessments, business impact analyses, and compliance reviews.
• Strong understanding of third-party risk management, vendor security assessments, and security auditing practices.
• Experience maintaining risk registers, remediation tracking, exception management, and compliance documentation.
• Knowledge of privacy requirements, data classification processes, and information governance best practices.
• Experience supporting audits, regulatory reviews, evidence collection, and compliance remediation efforts.
• Ability to analyze technical and business risks and recommend practical remediation strategies.
• Excellent documentation, reporting, presentation, and stakeholder communication skills.
• Bachelor's degree in Cybersecurity, Information Technology, Information Security, Computer Science, or a related field.

Requirements

• The hourly range for roles of this nature are $60.00 to $80.00/hr. Rates are heavily dependent on skills, experience, location, and industry.

Benefits

• cyberThink is an Equal Opportunity Employer.