Назад
Company hidden
6 дней назад

Cybersecurity Control Analyst (GRC)

71 500 - 120 478$
Формат работы
remote (только USA)
Тип работы
fulltime
Грейд
middle
Английский
b2
Страна
US/Mexico
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Cybersecurity Control Analyst (GRC): Driving cybersecurity control assessments, compliance activities, and continuous improvements for a GRC program with an accent on NIST, ISO, SOC 2, SOX, GDPR, and FedRAMP frameworks. Focus on conducting control tests, gathering evidence, advising technical and business partners, and producing executive-level reporting.

Location: Remote in the United States or Mexico; US-based remote role with an in-person interview required

Base salary for US-based employees: $71,500–$120,478 per year. Compensation for other locations is competitive for the employee’s home location.

Company

hirify.global develops an AI-powered identity security platform for human, AI, and non-human identities across SaaS and enterprise environments.

What you will do

  • Drive cybersecurity control assessments and compliance activities against applicable standards, requirements, and policies.
  • Plan and support control testing, including evidence gathering through GRC tool integrations.
  • Conduct control tests, develop control recommendations, and prepare executive-level reporting.
  • Provide control advisory support to technical and business partners across engineering, IT, compliance, and product.
  • Improve continuous testing processes and help align risk posture, control effectiveness, and emerging threats with industry frameworks.

Requirements

  • Bachelor’s degree in a related field or equivalent professional experience.
  • 3+ years of professional experience in security, risk, and compliance.
  • Strong understanding of NIST, ISO, FAIR, OWASP, and CIS security frameworks.
  • Working knowledge of ISO 27001, SOC 2, SOX, GDPR, and FedRAMP.
  • Strong analytical, problem-solving, communication, prioritization, and follow-up skills.
  • Ability to translate complex technical concepts into business-friendly language and collaborate across distributed teams.

Nice to have

  • Certifications such as CISSP, CISA, CISM, CRISC, or equivalent.
  • Familiarity with enterprise governance, risk, and compliance tools and platforms.

Culture & Benefits

  • Flexible, remote-first work culture focused on autonomy, trust, and work-life balance.
  • Medical, dental, and vision insurance, plus disability and life insurance coverage.
  • Flexible vacation policy, paid holidays, sick leave, and paid parental leave.
  • 401(k) plan with company matching, HSA, and flexible spending accounts.
  • Career growth opportunities, employee assistance resources, and additional voluntary benefits.
  • The role may include a corporate bonus or role-specific commission and potential equity participation.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →