Senior Cyber Risk & Compliance Analyst; remote
Hammond, Lake County, Indiana, 46320, USA
Listed on 2026-11-05
-
IT/Tech
Cybersecurity, Information Security & Data Protection, Security Management & Operations
Title:
Senior Cyber Risk & Compliance Analyst
Location :
Remote
Target Start Date : ASAP (must be readily available, looking to start week of 11/2)
Type:
Contract
Pay Rate : $75.00-$85.00/hr
Our client is seeking a Senior Cyber Risk & Compliance Analyst to strengthen cybersecurity governance, risk management, compliance, audit readiness, and technical assurance across the enterprise. This senior individual contributor will combine strong GRC expertise with practical technical knowledge across infrastructure, applications, identity, cloud, and business processes.
The role will translate technical vulnerabilities, control deficiencies, audit findings, and regulatory requirements into defensible risk decisions, prioritized remediation plans, measurable outcomes, and clear executive reporting. Key areas include Drata, ISO/IEC 27001, TISAX, NIST Cybersecurity Framework, SOX IT General Controls, vulnerability management, third‑party risk, identity governance, and operational resilience.
Key Requirements- Lead cybersecurity risk assessments, maintain risk registers, and manage risk treatment plans, exceptions, corrective actions, and closure evidence.
- Administer and mature Drata or a comparable GRC platform, including controls, frameworks, evidence, testing, ownership, workflows, and integrations.
- Support readiness and gap assessments across ISO/IEC 27001, TISAX, NIST CSF, and SOX ITGC requirements and develop practical remediation roadmaps.
- Coordinate internal and external IT/cybersecurity audits, evaluate control design and operating effectiveness, and drive findings through remediation and closure.
- Coordinate penetration testing and vulnerability remediation, validating severity, business impact, ownership, compensating controls, and retesting.
- Develop and maintain cybersecurity policies, standards, procedures, control requirements, and framework mappings.
- Assess identity and access controls, privileged access, provisioning/deprovisioning, segregation of duties, change management, logging, monitoring, backup, and recovery controls.
- Partner with infrastructure, application, cloud, engineering, identity, and vendor teams to address high‑risk findings and improve security posture.
- Perform cybersecurity reviews of technology providers and support third‑party risk, business continuity, disaster recovery, and operational resilience programs.
- Develop risk indicators, dashboards, governance materials, and executive‑level reporting.
- Lead cross‑functional governance activities and communicate complex technical and regulatory issues to both technical and business stakeholders.
Title:
Senior Cyber Risk & Compliance Analyst
Location :
Remote
Target Start Date : ASAP (must be readily available, looking to start week of 11/2)
Type:
Contract
Pay Rate : $75.00-$85.00/hr
Our client is seeking a Senior Cyber Risk & Compliance Analyst to strengthen cybersecurity governance, risk management, compliance, audit readiness, and technical assurance across the enterprise. This senior individual contributor will combine strong GRC expertise with practical technical knowledge across infrastructure, applications, identity, cloud, and business processes.
The role will translate technical vulnerabilities, control deficiencies, audit findings, and regulatory requirements into defensible risk decisions, prioritized remediation plans, measurable outcomes, and clear executive reporting. Key areas include Drata, ISO/IEC 27001, TISAX, NIST Cybersecurity Framework, SOX IT General Controls, vulnerability management, third‑party risk, identity governance, and operational resilience.
Key Requirements- Lead cybersecurity risk assessments, maintain risk registers, and manage risk treatment plans, exceptions, corrective actions, and closure…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).