Cybersecurity GRC & Security Assurance Analyst

VGAI Solutions is seeking a Cybersecurity GRC & Security Assurance Analyst to support cybersecurity risk reduction and compliance initiatives across enterprise IT and OT environments. The role focuses on exposure and vulnerability management, security assessments, third-party risk, reporting automation, remediation tracking, governance, and executive security metrics.

Responsibilities:

• Manage cybersecurity exposure, vulnerability, and asset visibility programs across IT/OT environments
• Conduct security assessments, compliance reviews, and control gap analysis
• Monitor and track remediation activities, risks, and issue closure
• Perform third-party/vendor security assessments and review security questionnaires
• Develop Power BI dashboards and automate reporting processes using Python
• Support governance, audit, and compliance activities aligned with NIST, ISO 27001, and CIS Controls
• Collaborate with business, technology, and security teams to improve cyber risk posture
• Prepare executive-level security metrics, reports, and governance updates

Requirements:

• Cybersecurity Governance, Risk & Compliance (GRC)
• Cybersecurity Exposure Management (CEM)
• Vulnerability & Risk Management
• IT & OT Security
• Asset Discovery & Inventory Management
• Security Assessments & Compliance
• Third-Party Risk Management (TPRM)
• Power BI Reporting & Dashboards
• Python Automation/Scripting
• Remediation & Issue Management
• NIST Cybersecurity Framework
• ISO 27001
• CIS Controls
• Audit & Compliance Support
• Stakeholder Management & Executive Reporting
• 8+ years of experience in Cybersecurity, GRC, Risk Management, or Security Assurance
• Experience supporting manufacturing, industrial, or OT environments
• Security certifications such as CISSP, CISM, CRISC, or Security+ are preferred