GRC Cybersecurity Analyst - ICD

GRC Cybersecurity Analyst - ICDJob#: 3056930

Job Description:

GRC Cybersecurity Analyst

Location:

Atlanta, GA

Employment Type:

Contract-to-Hire Work Arrangement:
Onsite Security & Citizenship Requirements Due to U.S. federal research contract requirements, candidates must be U.S. Citizens and capable of obtaining and maintaining an active Secret security clearance.

Position Overview We are seeking a senior-level GRC Cybersecurity Analyst to support enterprise cybersecurity, risk management, and compliance initiatives within a highly regulated environment. This role is ideal for a technically grounded cybersecurity professional who can evaluate risk, interpret complex regulatory requirements, and translate those requirements into practical guidance for stakeholders across the organization.

Unlike traditional compliance-only positions, this role requires strong technical credibility, sound judgment, and the ability to communicate effectively with technical teams, leadership, auditors, and business stakeholders. The successful candidate will serve as a trusted advisor on cybersecurity risk, compliance obligations, and security governance activities.

Key Responsibilities Review and assess cybersecurity exception and deviation requests, evaluating technical, operational, and business risks.

Perform cybersecurity and information technology risk assessments for systems, applications, architectures, and configurations.

Interpret federal cybersecurity regulations, contractual requirements, and security frameworks and translate them into actionable organizational guidance.

Support compliance initiatives related to NIST, DFARS, CMMC, Controlled Unclassified Information (CUI), and other security requirements.

Develop, maintain, and improve cybersecurity policies, standards, procedures, and governance processes.

Validate security control implementation and configuration to ensure alignment with regulatory and organizational requirements.

Partner with technical and business stakeholders to identify risks, recommend mitigations, and drive remediation activities.

Support internal assessments, external audits, and compliance reviews by providing analysis, evidence, and subject matter expertise.

Contribute to cybersecurity awareness and training initiatives.

Mentor junior and mid-level analysts while promoting best practices across the organization.

Serve as a trusted resource for complex cybersecurity, compliance, and risk-related inquiries.

Identify opportunities for process improvement and help mature enterprise cybersecurity governance and risk management programs.

Required Qualifications Education Bachelor ’s degree in Cybersecurity, Information Security, Information Assurance, Information Technology, Computer Science, or a related discipline, or an equivalent combination of education and experience.

Experience5+ years of progressively responsible experience in cybersecurity, governance, risk management, compliance, information assurance, or information security.

Strong technical foundation developed through hands-on experience in roles such as:

Systems Administrator Network Engineer Database Administrator Cybersecurity Engineer Identity & Access Management (IAM) Professional Similar infrastructure or security-focused positions

Demonstrated experience assessing and communicating cybersecurity risk.

Experience working with security frameworks, control assessments, compliance programs, or audit activities.

Technical Qualifications Working knowledge of Windows, Linux, macOS, networking, and cybersecurity technologies.

Experience performing security control assessments, risk analysis, and compliance evaluations.

Familiarity with security frameworks and standards such as NIST 800-53, NIST 800-171, CMMC, RMF, DFARS, or similar regulatory requirements.

Strong analytical, written, verbal, and interpersonal communication skills.

Ability to interpret complex requirements and communicate recommendations to both technical and non-technical audiences.

Professional certifications such as CISSP, CISM, CISA, SecurityX, CCNP Security, or equivalent are highly valued.

Preferred Qualifications Master’s degree in Cybersecurity, Information Security, Information Assurance, Business, or a related field.

Experience supporting organizations that handle CUI or operate within federal government, defense, research, or highly regulated environments.

Experience working with external assessors, auditors, and regulatory stakeholders.

Knowledge of MITRE ATT&CK, OWASP Top 10, and modern…