cloudazurerisk assessmentcompliancecybersecuritynistmicrosoft 365entra id
Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
$85к-105к/год
$87к$97кмедиана$140к
По похожим ролям (47) ~ $97к/год
82
Хорошая вакансия
развернуть
У роли понятный фокус на GRC, реалистичные требования к опыту и хорошие льготы, но обязательная работа в офисе ограничивает гибкость.
Кликните для подробной информации
Только офисПонятный профильХорошие льготыЕсть куда расти
Оценка от Hirify AI
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
IT GRC Security Analyst (Cybersecurity): Analyzing technologies, cloud services, and business solutions to identify security and compliance risks with an accent on risk assessments, technical analysis, and cybersecurity frameworks. Focus on evaluating system operations, supporting security initiatives, coordinating technical teams and stakeholders, and communicating cyber risks.
Location: Thornton, Colorado, United States; onsite at a company-designated office or field location.
Salary: $85,000–$105,000 per year, paid weekly.
Company
hirify.global is a publicly traded holding company of specialty electrical construction companies with 8,500+ employees and operations across large-scale electrical construction projects in the United States and Canada.
What you will do
Analyze technologies, cloud services, and business solutions for security and compliance considerations.
Perform risk analyses against NIST 800-171, CIS, customer-specific, and other frameworks.
Evaluate system operations, technical documentation, and supplied information, then communicate identified cyber risks.
Respond to customer security compliance requests.
Support security initiative implementation by coordinating technical teams and business stakeholders.
Monitor emerging cybersecurity threats, technologies, regulatory requirements, and industry practices.
Requirements
2–4 years of experience in information technology, cybersecurity, compliance, system administration, networking, cloud technologies, or a related technical discipline.
Experience with Microsoft 365, Entra ID, Azure, Windows networking, or cloud technologies.
Exposure to cybersecurity programs, audits, risk assessments, vulnerability management, or compliance initiatives.
Critical thinking, information analysis, communication with technical and non-technical audiences, and strong organizational and documentation skills.
Broad understanding of networking, operating systems, cloud platforms, identity and access management, endpoint management, databases, and applications.
Ability to work independently while collaborating effectively with cross-functional teams.
Curiosity and willingness to explore technical environments to understand system operation.
Bachelor's degree in Computer Science, Information Technology, or a related field; equivalent relevant education and experience may substitute.
Applicants must be currently authorized to work in the United States for any employer.
Nice to have
Experience gathering and analyzing technical information and working with cross-functional technical teams.
Foundational knowledge of NIST CSF, NIST 800-53, NIST 800-171, CIS Controls, ISO 27001, or similar frameworks.
Security+, Network+, Azure Fundamentals, SC-900, ISC2 CC, CISSP, CISM, or similar certifications.
Culture & Benefits
Full-time onsite work with regular and predictable attendance required.
15 days of paid time off plus 10 paid holidays; $1,200 annual health and wellness reimbursement.
401(k) with 100% matching up to 6%, immediate vesting, and potential annual profit sharing.
Educational assistance, internal training, disability and life insurance, employee assistance, and other voluntary plans.
Employment may be subject to background checks and drug testing; the company does not sponsor work visas.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →