Cyber Security Analyst (GRC)

Glint Tech Solutions is a women-owned, global IT staffing and recruiting firm serving enterprise clients across the USA and Canada and hiring on behalf of a leading healthcare insurance client. The Cyber Security Analyst (GRC) will support cybersecurity risk management by assessing controls, identifying and mitigating risks, preparing documentation, developing security metrics, and supporting regulatory compliance efforts.

Responsibilities:

• Support the Cybersecurity Risk Management program, guiding a diverse technical team and collaborating across risk-related teams
• Partner with TPRM, Procurement, Legal, and business stakeholders on continuous monitoring efforts
• Assess cybersecurity controls, identify gaps, and manage mitigation strategies to closure
• Conduct risk assessments evaluating security practices, data handling procedures, and regulatory compliance (HIPAA, PCI, GDPR)
• Prepare detailed risk assessment reports and maintain a comprehensive repository of documentation
• Design, implement, and integrate security solutions to address enterprise risks
• Develop Information Security Risk Metrics (KPIs/KRIs) to support the analytics team
• Support NIST, FedRAMP, and HIPAA compliance efforts including assessment readiness, POA&M management, and continuous monitoring

Requirements:

• One or more certifications: CISSP, CEH, CTIA, CAP, or EnCase Certified Examiner
• Bachelor's Degree in Computer Science, Cyber Security, IT, or related field (or 4 additional years of experience in lieu of degree)
• 5+ years of cybersecurity experience, specifically in Risk Management, with 3rd party/supplier risk assessment knowledge
• Experience with eGRC platforms (HyperProof, Archer, or ServiceNow GRC)
• Strong understanding of NIST Risk Management Framework and FAIR quantitative model
• Ability to develop and socialize security policies, standards, and procedures
• Knowledge of HIPAA/PHI security standards and network/firewall architecture
• SOC Reporting / HITRUST knowledge
• Diverse background in cloud (off-prem) platforms
• Experience within the healthcare insurance/payor industry