Cybersecurity Analyst - ICD

Cybersecurity Analyst - ICD

Location:

Atlanta, GA (Onsite)

Due to contract requirements, candidates for this position must be U.S. Citizens.

Role Overview

We are seeking a versatile Governance, Risk, and Compliance (GRC) Cybersecurity Analyst to lead the assessment and oversight of business policies, procedures, and operations. This role is responsible for ensuring the organization meets internal requirements and government regulations for the protection of information. The ideal candidate is a smart, humble GRC professional who can evaluate risk, understand technology, and communicate effectively across governance, risk, and compliance functions.

Key Responsibilities

• Independently assess risk, deviation requests, compensating controls, and business impacts.
• Serve as a primary point of contact for complex cybersecurity and compliance inquiries.
• Lead the development, review, and maintenance of enterprise-wide security policies, standards, and procedures.
• Conduct information technology risk assessments for systems, software, and architectures.
• Validate security control implementation to ensure compliance with frameworks such as NIST, DFARS, and CMMC.
• Lead or coordinate activities related to audits, assessments, and regulatory reviews.
• Mentor junior and mid-level GRC analysts, providing guidance on best practices and professional development.
• Interpret and apply laws, regulations, standards, and industry best practices.

Required Qualifications

Education:

Bachelor's degree in cybersecurity, information security, or a related field is preferred. An Associate's degree with 7+ years of relevant hands-on experience is also acceptable.

Experience:

5+ years of progressive GRC experience, including leading or owning GRC initiatives. Broad exposure across governance, risk management, and compliance functions is required.

Technical

Skills:

• Strong understanding of Windows, Linux, MacOS, VMs, containers, infrastructure, and security concepts.
• Demonstrated experience with vulnerability management processes and tools.
• Advanced experience with data analysis and reporting in Excel.
• Proven ability to write policies, documentation, and communicate technical concepts to non-technical audiences.
• Experience with compliance frameworks such as NIST 800-171, PCI, ISO 27001, HIPAA, or SOC.
• One or more intermediate or advanced cybersecurity/GRC certifications (e.g., CISSP, CISM, CISA).

Preferred Qualifications

• Master's degree in a related field.
• Deep understanding of cybersecurity frameworks like NIST 800-53/171, CMMC, and MITRE ATT&CK.
• Demonstrated experience leading audit, assessment, or certification efforts.
• Proficiency with Atlassian Confluence and Jira.

Additional Information

• Travel requirements are less than 10%.