Job Overview:

We are seeking an experienced GRC Cybersecurity Analyst to join our team in a remote capacity. This individual will play a key role in supporting GRC functions, ensuring that our cybersecurity strategies align with industry best practices and regulatory requirements. In this role, you will help safeguard sensitive client and company data while working closely with our security, compliance, and IT teams.

Key Responsibilities:

• Governance, Risk, and Compliance:

  • Support the development, implementation, and maintenance of GRC frameworks for information security.

  • Conduct risk assessments to identify vulnerabilities and ensure controls are in place to mitigate risks.

  • Ensure compliance with industry standards and regulations (e.g., GDPR, SOC 2, ISO 27001) and internal policies.

• Cybersecurity Program Management:

  • Work with internal stakeholders to ensure cybersecurity practices are consistent across all business units.

  • Develop and maintain risk management reports, ensuring senior leadership is kept up-to-date on compliance and risk status.

  • Assist in the creation of security policies, procedures, and guidelines to ensure adherence to regulatory requirements.

• Incident Response & Monitoring:

  • Assist in the monitoring and reporting of cybersecurity incidents and breaches, including identifying areas of improvement.

  • Help develop and implement incident response plans, ensuring preparedness for potential security threats.

• Audit & Assessment:

  • Support internal and external audits to ensure compliance with regulatory frameworks.

  • Provide recommendations for improvements based on audit findings and cybersecurity assessments.

• Collaboration & Communication:

  • Work closely with IT and other departments to integrate cybersecurity practices into day-to-day operations.

  • Educate and advise teams on GRC-related topics to ensure awareness and compliance across the organization.

Qualifications:

• Experience & Knowledge:

  • 3+ years of experience in GRC (Governance, Risk, and Compliance), with a focus on cybersecurity in a financial services or wealth management environment.

  • Strong understanding of cybersecurity frameworks, risk management principles, and regulatory compliance standards (e.g., NIST, ISO 27001, SOC 2, GDPR, CCPA).

  • Experience working with GRC tools (e.g., Archer, ServiceNow, MetricStream) is preferred.

• Skills & Abilities:

  • Strong analytical and problem-solving skills, with the ability to assess complex cybersecurity risks.

  • Excellent communication and collaboration skills, capable of working effectively with cross-functional teams and senior leadership.

  • Ability to create detailed reports and presentations for senior management.

• Certifications:

  • Relevant certifications are a plus, such as CISSP, CISA, CISM, or CRISC.

• Education:

  • A Bachelor’s degree in Cybersecurity, Information Technology, Risk Management, or related field is preferred.

This is a remote, work from home position. This role is to be filled outside the states of California and Colorado.

**We are an equal opportunity employer and value diversity at our company. We do not discriminate based on race, religion, color, ethnic origin, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.**

#LI-KH2