grc analyst

MTBC CareCloud

Job SummaryThe GRC Analyst will support the development, implementation, and maintenance of Governance, Risk, and Compliance (GRC) frameworks, ensuring organizational alignment with regulatory requirements and industry best practices. The role involves assisting in risk assessments, compliance monitoring, documentation management, and audit readiness to strengthen the overall security posture of the organization.Key Responsibilities<ul><li>Support in the implementation and maintenance of Governance, Risk, and Compliance frameworks and policies.</li><li>Conduct and document risk assessments; track and monitor mitigation activities.</li><li>Ensure compliance with standards such as ISO 27001, NIST, HIPAA, GDPR, or other applicable local regulations.</li><li>Maintain and update policies, procedures, and compliance documentation.</li><li>Coordinate with internal teams to ensure audit readiness and support external/internal audits.</li><li>Stay informed of evolving regulations, standards, and best practices related to GRC.</li></ul>Requirements<ul><li>Bachelor&rsquo;s degree in Computer Science, Information Technology, Cyber Security or related field.</li><li>1&ndash;2 years of experience in GRC, information security, compliance, or related roles.</li><li>Familiarity with frameworks such as ISO 27001, NIST, HIPAA, GDPR, and risk management methodologies.</li><li>Strong analytical, documentation, and communication skills.</li><li>Relevant certifications (preferred): ISO 27001or similar.</li></ul>Job Type: Full-timeApplication Question(s):<ul><li>What is current salary?</li><li>What is your expected salary?</li></ul>Work Location: In person

GRC Analyst

Cyber Force

<div>Cairo, Egypt Hybrid Full-time</div>
 <div><h2 class="jobSectionHeader">About Cyber Force</h2>

Cyber Force is a cybersecurity consultancy delivering advisory, managed services, and operations to international clients. Our senior-led teams combine governance, engineering, and 24&times;7 response to turn cyber risk into measurable resilience.
<h2 class="jobSectionHeader">
Role Overview</h2>

We are looking for a Junior GRC Analyst to join our Cyber Risk, GRC &amp; Regulatory team. You will support delivery of governance, risk, and compliance engagements for international clients &mdash; conducting gap analyses, developing policies, executing risk assessments, supporting audits, and mapping controls across ISO 27001, NIST, PCI DSS, SOC 2, and more. This is a consultancy delivery role: real client projects from day one.
<h2 class="jobSectionHeader">
Key Responsibilities</h2>
<ul><li>Conduct gap analyses against ISO/IEC 27000 family (27001, 27002, 27005, 27701) and support remediation plans</li>
<li>Develop, review, and maintain information security policies, standards, and procedures</li>
<li>Execute risk assessments: identify threats/vulnerabilities, evaluate likelihood/impact, maintain risk registers</li>
<li>Support internal and external audits: gather evidence, review controls, track findings</li>
<li>Conduct vendor and third-party risk assessments</li>
<li>Map and crosswalk controls across ISO 27001, NIST CSF v2, NIST SP 800-53, PCI DSS, SOC 2</li>
<li>Develop Statements of Applicability (SoA), BCPs, and ISMS documentation</li>
<li>Prepare client deliverables: gap reports, risk outputs, policy docs, compliance summaries</li>
<li>Leverage AI tools (Claude, ChatGPT) for research, policy drafting, control mapping</li>
<li>Collaborate with SOC, offensive security, and architecture teams on control validation</li>
</ul><h2 class="jobSectionHeader">Requirements</h2>
<ul><li>Bachelor&rsquo;s in Cybersecurity, Information Security, IT, Computer Science, or related</li>
<li>0&ndash;1 year in GRC, information security, compliance, or IT audit (internships count)</li>
<li>Solid understanding of the ISO/IEC 27000 family (27001, 27002, 27005) &mdash; a must</li>
<li>Familiarity with NIST CSF v2, RMF, SP 800-53 &mdash; highly preferred</li>
<li>Familiarity with PCI DSS and SOC 2 &mdash; highly preferred</li>
<li>Fluent English (written and spoken)</li>
<li>Demonstrated experience using LLM-based tools (Claude, ChatGPT) &mdash; this is a must</li>
<li>Strong technical writing skills</li>
<li>CISSP, CASP+, or VICI VCGP &mdash; a major plus</li>
<li>VICI VCGA, Security+, ISC2 CC, ISO 27001 LI/LA, CISA, CRISC &mdash; a plus</li>
<li>GRC platforms (ServiceNow, Archer, OneTrust) &mdash; a plus</li></ul></div>
 <div><h4 class="jobSectionHeader">Role details</h4>
<div>Location Cairo, Egypt
</div><div>Type Full-time
</div><div>Mode Hybrid</div></div>

Junior GRC Analyst

Oman Arab Bank

<div>
 
 
 
 Purpose and Summary
 
 :
 
 
 <ul>
 <li>
 To primarily ensure Bank acts in accordance with its internal policies, external compliance requirements, and risk appetite through the alignment of strategy with organizational objectives.
 </li>
 <li>
 To ensure the operational environment remains secured, managing risk to acceptable level by analyzing risk probability, impact and prioritizing control implementation.
 </li>
 </ul>
 
 
 
 
 
 
 Key Deliverables:
 
 
 
 <ul>
 <li>
 Develop, implement, and maintain Information Security policies, standards, and frameworks in line with regulatory demands and new international standard practices.
 </li>
 <li>
 Overseeing Information Security compliance to ensure adherence to the bank&rsquo;s security policies and standards.
 </li>
 <li>
 Preparing MIS Trackers, Reports and Dashboards for the management.
 </li>
 <li>
 Perform Information security risk assessment against industry standard security framework/policies for IT/IS risks
 </li>
 <li>
 Document, Approve and Progress the Implementation of the Information Security Awareness Program Employees &amp; Customers.
 </li>
 <li>
 Develop and report on program execution KPIs to the ISWG (IS workgroup) on monthly, quarterly and annual basis.
 </li>
 <li>
 Maintain the CBO, SWIFT &amp; PCI-DSS compliance tracking. Produce the reports and dashboard. Ensure to share the report and dashboard with the ISWG (IS Workgroup) on monthly basis. Ensure timely closure, escalation of the action items and track / record activities in auditable format
 </li>
 <li>
 Report any violation to approved security policies and provide recommendations.
 </li>
 <li>
 Logs all InfoSec related Incidents and track for closure of the incidents and maintain risk register.
 </li>
 <li>
 Conduct research and gain awareness of latest information security trends.
 </li>
 <li>
 Liaise with different entities on security events or global threats.
 </li>
 <li>
 Liaise with different team members to deploy security controls recommended by vendors and by Information security team.
 </li>
 </ul>
 
 
 
 
 
 
 Qualifications
 
 :
 
 
 <ul>
 <li>
 Degree in Information Security/IT or equivalent.
 </li>
 <li>
 Preferred Professional Information Security Certification or equivalent.
 </li>
 <li>
 ITIL v3(Information Technology Information Library)
 </li>
 <li>
 ISO/IEC 2013:27001 Lead Implementer
 </li>
 <li>
 ISO/IEC 2013:27001 Lead Implementer
 </li>
 <li>
 CEH (Certified Ethical Hacking)
 </li>
 </ul>
 
 
 
 
 
 
 Skills/Knowledge
 
 :
 
 
 <ul>
 <li>
 Leadership Skills
 </li>
 <li>
 Effective Communication skills.
 </li>
 <li>
 Strong Risk Analysis skills.
 </li>
 <li>
 Attention to Details.
 </li>
 <li>
 Problem-Solving skills.
 </li>
 <li>
 Coordination skills.
 </li>
 <li>
 Teamwork skills.
 </li>
 <li>
 Reporting skills.
 </li>
 <li>
 Research skills
 </li>
 <li>
 Assessment skills.
 </li>
 <li>
 Sound Arabic &amp; English Languages skills.
 </li>
 </ul>
 
 
 
 
 
 
 
 
 
 Experience
 
 :
 
 
 <ul>
 <li>
 5 to 8 years of relevant experience.
 </li>
 </ul>
 
 
</div>

Senior Cyber Security GRC Analyst

Agility

<div>
 
 
 Role Summary:
 
 
 
 We are seeking a highly experienced and results-driven&nbsp;Senior Information Security Analyst&nbsp;to serve as our entral&nbsp;Governance, Risk, and Compliance (GRC) resource. This is a pivotal role responsible for the overall design, maintenance, and enhancement of the organization's security and resilience frameworks. The core purpose of this position is to ensure continuous compliance with all relevant international and local standards, with a specific focus on leading our audit readiness and certification efforts.
 
 
 
 Your Responsibilities:
 
 
 
 &nbsp;Compliance and GRC Management
 
 <ul>
 <li>
 &nbsp;Establish, maintain, and enhance the organization's Information Security Management System (ISMS) and Business Continuity &amp; Supply Chain Management (BCSM) frameworks
 </li>
 </ul>
 <ul>
 <li>
 Ensure the organization's compliance with all relevant local, regional, and international regulations and standards, ISO 27001, ISO 22301)
 </li>
 <li>
 Act as the primary auditee and point of contact for all internal and external information security audits
 </li>
 <li>
 Proactively identify, assess, and manage information security and business continuity risks to protect the organization's information assets
 </li>
 <li>
 Drive a culture of security and resilience across the organization
 </li>
 </ul>
 
 &nbsp;Security Controls &amp; Technical Oversight
 
 <ul>
 <li>
 &nbsp;Conduct security assessments and audits of various IT platforms, including cloud infrastructure , on-premise servers (Windows, Linux), databases, and network devices.
 </li>
 </ul>
 <ul>
 <li>
 Utilize or interpret reports from vulnerability scanners and penetration testing tools to identify and prioritize security weaknesses
 </li>
 <li>
 Evaluate and enforce robust Identity and Access Management (IAM) controls, including role-based access control (RBAC) and multi-factor authentication (MFA)
 </li>
 <li>
 Review and ensure the security of cloud deployments (IaaS, PaaS, SaaS), including security groups, IAM policies, and logging
 </li>
 <li>
 Apply strong knowledge of secure configuration baselines and hardening standards (CIS Benchmarks) for operating systems, web servers, and network equipment
 
 
 
 </li>
 </ul>
 
 Requirements
 
 
 
 
 
 Your Qualifications:
 
 
 <ul>
 <li>
 Education: Candidate must possess at least a Bachelor of Science or Bachelor of Computer Application
 </li>
 </ul>
 <ul>
 <li>
 Experience: A minimum of 5 - 10 years of experience in a similar environment
 </li>
 <li>
 Domain: Experience in Government Sector or Private Sector with Enterprise data Center Security Compliance
 </li>
 <li>
 Certifications: Essential certifications include ISO 27001, ISO 22301, CISSP, and CISA
 </li>
 <li>
 Language: Must be fluent in English, with Arabic as an added advantage.
 
 </li>
 </ul>
 
 
 Your Competencies:
 
 
 
 Technical:
 
 <ul>
 <li>
 Security Frameworks &amp; Standards: Profound knowledge of ISO 27001, NIST, and CIS
 </li>
 <li>
 Security Controls: A solid understanding of network security (Firewalls, IDS/IPS), Endpoint Security (EDR), IAM principles, and Cryptography
 </li>
 <li>
 Tools: Practical experience with Vulnerability and Risk Assessment Tools and familiarity with SIEM platforms
 </li>
 <li>
 Software Proficiency: Experience with GRC Platforms and documentation tools (Microsoft Office Suite, SharePoint, Jira, Confluence)
 </li>
 </ul>
 
 &nbsp;Behavioral:
 
 <ul>
 <li>
 Teamwork and Collaboration
 </li>
 <li>
 Quality and Results focused
 </li>
 <li>
 Learning Agility
 </li>
 <li>
 Business Acumen
 </li>
 <li>
 Decision Making
 </li>
 <li>
 Digital Savvy
 </li>
 <li>
 Agility and Adaptability
 </li>
 <li>
 Negotiation and influence
 </li>
 <li>
 Planning and Organizing
 </li>
 </ul>
</div>

Senior Information Security Analyst - Compliance & GRC

Stellar Hunters

<div><h4 class="jobSectionHeader">Job Summary</h4>

We are seeking a Cyber GRC Specialist to support and advance the company&rsquo;s cybersecurity governance, risk management, and compliance (GRC) initiatives. The successful candidate will collaborate with Security, IT, Legal, Privacy, Compliance, and business teams to identify and manage cyber risk, implement controls, maintain compliance with applicable frameworks and regulations, and support continuous improvement of the security posture. This role requires a pragmatic, consultative approach and the ability to translate technical security concepts into business risk terms.
<h4 class="jobSectionHeader">Key Responsibilities</h4>
<h5 class="jobSectionHeader">Governance &amp; Policy</h5>
<ul>
<li>Develop, maintain, and operationalize cybersecurity policies, standards, and procedures aligned with industry frameworks and regulatory requirements (e.g., NIST CSF, ISO 27001, SOC 2, PCI, relevant regional regulations).</li>
<li>Support security governance forums and reporting to senior leadership and stakeholders on cyber risk, control effectiveness, and remediation progress.</li>
<li>Collaborate with cross-functional teams to ensure security requirements are integrated into business processes, projects, and third-party relationships.</li>
</ul>
<h5 class="jobSectionHeader">Risk Management &amp; Assessments</h5>
<ul>
<li>Conduct and coordinate risk assessments, control gap analyses, and threat/risk modeling for systems, applications, and third-party services.</li>
<li>Maintain the risk register, prioritize remediation activities, and track closure of identified vulnerabilities and control deficiencies.</li>
<li>Perform vendor security and risk assessments; review third-party contracts and recommend appropriate security controls and contractual language.</li>
</ul>
<h5 class="jobSectionHeader">Compliance &amp; Audit Support</h5>
<ul>
<li>Support internal and external compliance initiatives, audits, and certifications (e.g., SOC 2, ISO 27001), including evidence collection, control testing, and remediation coordination.</li>
<li>Monitor regulatory and industry compliance requirements and translate obligations into practical control and process requirements across the organization.</li>
<li>Prepare and maintain documentation, control narratives, and artifacts required for assessments and regulatory inquiries.</li>
</ul>
<h5 class="jobSectionHeader">Incident Response &amp; Continuous Improvement</h5>
<ul>
<li>Participate in incident response planning and post-incident reviews; advise on control improvements and regulatory/contractual notification considerations.</li>
<li>Collaborate with Security Operations and IT teams to ensure controls are effectively implemented, monitored, and improved based on lessons learned and evolving threats.</li>
<li>Identify opportunities to automate control monitoring, reporting, and GRC workflows using GRC platforms and security tooling.</li>
</ul>
<h5 class="jobSectionHeader">Training, Awareness &amp; Advisory</h5>
<ul>
<li>Develop and deliver role-based security awareness, GRC guidance, and targeted training for employees, contractors, and business partners.</li>
<li>Provide practical, risk-based advisory to Product, Engineering, IT, and business teams on secure design, control selection, and compliance requirements.</li>
<li>Act as a trusted advisor for security and compliance questions related to new projects, cloud deployments, and third-party integrations.</li>
</ul>
<h4 class="jobSectionHeader">Required Qualifications - Skills &amp; Experience</h4>
<ul>
<li>Bachelor&rsquo;s degree in Information Security, Computer Science, Cybersecurity, Risk Management, or a related field, or equivalent practical experience.</li>
<li>3+ years of demonstrated experience in cybersecurity GRC, risk management, compliance, or related roles within a commercial or regulated environment.</li>
<li>Familiarity with common cybersecurity frameworks and standards (e.g., NIST CSF, ISO 27001, SOC 2) and practical experience applying them.</li>
<li>Experience performing risk assessments, vendor/security assessments, control gap analysis, and supporting audits or certifications.</li>
<li>Working knowledge of cloud security concepts (AWS, Azure, GCP), identity and access management, and common security controls.</li>
<li>Strong written and verbal communication skills with the ability to document controls, prepare executive reports, and communicate with technical and non-technical stakeholders.</li>
<li>Experience with GRC platforms, ticketing systems, and security assessment tools; comfortable working in cross-functional, fast-paced environments.</li>
</ul>
<h4 class="jobSectionHeader">Preferred Qualifications</h4>
<ul>
<li>Relevant certifications such as CISSP, CISM, CRISC, CGEIT, or certification in GRC platforms preferred.</li>
<li>Experience supporting SOC 2, ISO 27001, or other compliance programs and working with external auditors.</li>
<li>Prior exposure to privacy requirements and data protection interactions with cybersecurity controls is a plus.</li>
<li>Experience in cloud-native environments, DevSecOps practices, and automation of control monitoring is advantageous.</li>
</ul>
<h4 class="jobSectionHeader">Work Environment &amp; Compensation</h4>
<ul>
<li>Full-time role with a hybrid onsite/remote work model; occasional travel may be required for stakeholder meetings, audits, or vendor engagements.</li>
<li>Competitive salary commensurate with experience and a comprehensive benefits package, including health insurance, retirement plan options, and paid time off.</li>
<li>Opportunities for professional development, certification support, and career progression within Security, Compliance, and Risk functions.</li>
<li>Inclusive and respectful workplace culture that values diversity, equity, and work-life balance.</li></ul></div>

Cyber GRC Specialist

True Anomaly

<div><div>Space is a warfighting domain. True Anomaly seeks those with the talent and ambition to build the technology that secures it.

OUR MISSION

True Anomaly delivers decisive capabilities for space superiority. We build autonomous spacecraft, advanced payloads, mission software, and space-based interceptors &mdash; enabling the U.S. and its Allies to secure the space environment and counter threats from the ultimate high ground.

OUR VALUES
<ul>
<li>Be the offset. We create asymmetric advantages with creativity and ingenuity.</li>
<li>What would it take? We challenge assumptions to deliver ambitious results.</li>
<li>It&rsquo;s the people. Our team is our competitive advantage and we are better together.</li>
</ul></div><div>
Your Mission

We are seeking a driven and detail-oriented Enterprise Risk Analyst to support two distinct but interconnected lines of effort: Enterprise Risk Management (ERM) and Third-Party Vendor Risk Management (TPVRM). Reporting to the Senior Enterprise Risk Manager, you will play a hands-on role in executing risk assessments, maintaining program documentation, tracking remediation activities, and building the data foundation that powers executive-level risk decision-making.

This role is ideal for a mid-career risk professional who is fluent in frameworks such as NIST RMF and CMMC, is developing practical experience with risk quantification methodologies like FAIR and OCTAVE, and is eager to grow within a fast-paced aerospace and defense SaaS environment. You will work closely with engineering, security, legal, compliance, and operations teams to help identify, document, and track risk across the enterprise and its third-party supply chain. 


Responsibilities: 


Enterprise Risk Management
<ul>
<li>Support the design, execution, and continuous improvement of the enterprise risk management program under the direction of the Senior Enterprise Risk Manager.</li>
</ul><ul><li>Assist in conducting structured risk assessments using OCTAVE or similar threat-and-asset-centric methodologies, documenting findings, threat profiles, and recommended mitigations.</li>
</ul><ul><li>Support the application of FAIR methodology to help quantify risks in financial terms and contribute to risk prioritization analyses for leadership.</li>
</ul><ul><li>Maintain and update the enterprise risk register, ensuring accuracy of risk ratings, ownership assignments, remediation status, and residual risk tracking.</li>
</ul><ul><li>Build and maintain program dashboards, KPI/KRI reports, and status tracking using tools such as Jira, Confluence, enterprise GRC platforms, and MS Project.</li>
</ul><ul><li>Assist with audit readiness activities including evidence collection, pre-assessment preparation, control documentation, and post-audit remediation tracking.</li>
</ul><ul><li>Support POA&amp;M management for IL5 and IL6 environments, tracking open items to closure and escalating blockers to the Enterprise Risk Manager.</li>
</ul><ul><li>Contribute to the development and maintenance of risk policies, standards, and guidelines aligned to NIST SP 800-53 Rev. 5, NIST SP 800-171, RMF, and CMMC Level 3.</li>
</ul><ul><li>Coordinate and track internal audit schedules, findings, and corrective action plans across business units.</li>
</ul>
Third-Party Vendor Risk Management
<ul>
<li>Execute vendor risk assessments as part of the onboarding and periodic review lifecycle, including security questionnaire administration, documentation review, and risk scoring.</li>
</ul><ul><li>Maintain the vendor risk inventory and lifecycle tracking records, ensuring all vendors are appropriately tiered and assessed on schedule.</li>
</ul><ul><li>Monitor vendor risk signals including cybersecurity advisories, regulatory actions, and contractual compliance status, escalating material changes to the Enterprise Risk Manager.</li>
</ul><ul><li>Support contract and procurement teams by providing vendor risk assessment findings and recommended risk mitigation language.</li>
</ul><ul><li>Assist in ensuring TPVRM program alignment with CMMC supply chain requirements, DFARS clauses, and ITAR/export control considerations for critical suppliers.</li>
</ul><ul><li>Develop and maintain vendor risk reporting inputs and dashboard content to support executive-level visibility into third-party risk exposure.</li>
</ul>
Cross-Functional Collaboration
<ul>
<li>Serve as a reliable day-to-day point of contact for risk-related inquiries from internal stakeholders across engineering, security, operations, and legal teams.</li>
</ul><ul><li>Track program milestones, action items, and deliverables, proactively communicating status and flagging risks or dependencies to the Enterprise Risk Manager.</li>
</ul><ul><li>Continuously improve risk program workflows, documentation templates, and reporting processes to support scalable and repeatable execution.</li>
</ul><ul><li>Support the preparation of materials for internal leadership briefings, external assessor interactions, and government partner reviews.</li></ul> 


Qualifications
<ul>
<li>5+ years of experience in enterprise risk management, GRC, cybersecurity risk, compliance, or a closely related discipline.</li>
</ul><ul><li>Working knowledge of NIST SP 800-53, NIST SP 800-171, DoD RMF (IL5/IL6), and CMMC, with direct experience supporting assessments or audits under one or more of these frameworks.</li>
</ul><ul><li>Familiarity with risk assessment methodologies including FAIR and/or OCTAVE, with a desire to deepen applied expertise in risk quantification.</li>
</ul><ul><li>Experience supporting or executing third-party/vendor risk assessments, including questionnaire administration, documentation review, and risk tracking.</li>
</ul><ul><li>Hands-on experience with program management and GRC documentation tools including Jira, Confluence (Atlassian suite), MS Project, enterprise GRC platforms, and MS Visio or Lucidchart.</li>
</ul><ul><li>Strong written and verbal communication skills, with the ability to clearly document findings and translate risk concepts for both technical and non-technical audiences.</li>
</ul><ul><li>Highly organized, self-directed, and comfortable managing multiple workstreams simultaneously in a fast-paced, regulated environment.</li>
</ul><ul><li>Active or ability to obtain SECRET, TS/SCI security clearance.</li>
</ul><ul><li>Must be a U.S. citizen, lawful permanent resident, or protected individual per ITAR requirements (8 U.S.C. 1324b(a)(3)).</li></ul> 


Preferred Qualifications
<ul>
<li>Background in startup, aerospace, defense technology, or SaaS companies operating in regulated government markets.</li>
</ul><ul><li>Industry certifications such as:</li>
</ul><ul><li>Certified in Risk and Information Systems Control (CRISC)</li>
</ul><ul><li>Certified Information Systems Auditor (CISA)</li>
</ul><ul><li>Open FAIR Certification (The Open Group)</li>
</ul><ul><li>CompTIA Security+ or equivalent</li>
</ul><ul><li>Certified ScrumMaster (CSM) or similar Agile certification</li>
</ul><ul><li>Experience with cloud environments, particularly Azure Government and/or AWS GovCloud.</li>
</ul><ul><li>Familiarity with POA&amp;M management, SSP documentation, and audit evidence collection in DoD authorization contexts.</li>
</ul><ul><li>Working knowledge of ITAR, EAR, DFARS, and export control considerations as they relate to vendor and supply chain risk.</li>
</ul><ul><li>Familiarity with Agile/Scrum and hybrid project delivery models.</li></ul> 


Compensation
<ul>
<li>Base Salary: Denver - $115,000 to $155,000, Long Beach - $120,000 to $165,000, Washington, DC - $120,000 to $165,000</li>
</ul><ul><li>Equity + Benefits including Health, Dental, Vision, HRA/HSA options, PTO and paid holidays, 401K, Parental Leave</li>
</ul>
Your actual level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, location, and experience. 


Additional Requirements
<ul>
<li>Work Location: This role will be onsite at one of our office locations: Centennial, CO, Long Beach, CA, or Washington, DC #LI-Onsite</li>
</ul><ul><li>Work Environment: Standard office setting, working at a desk or in a production factory environment</li>
</ul><ul><li>Physical Demands: May include frequent standing, sitting, walking, bending, and lifting or carrying items up to 20 lbs.</li></ul> 


This position will be open until it is successfully filled.

To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR), you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State.

We value diversity of experience, knowledge, backgrounds, and perspectives and harness these qualities to create extraordinary impact. True Anomaly is committed to equal employment opportunity regardless of sex, race, religion or belief, ethnic or national origin, disability, age, citizenship, marital, domestic or civil partnership status, sexual orientation, gender identity, pregnancy, maternity or related condition (including breastfeeding) or any other basis as protected by applicable law. If you have a disability or additional need that requires accommodation, please do not hesitate to let us know.</div><div> 
To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR) you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State.

True Anomaly is committed to equal employment opportunity on any basis protected by applicable state and federal laws. If you have a disability or additional need that requires accommodation, please do not hesitate to let us.</div></div>

Enterprise Risk Analyst

Asante

<div><div><div>Req #: 24429 
Entity: Asante Corporate 
Location: Medford OR 
Workplace Type: Remote 
Department: ITS Enterprise Svc 
Shift: Primarily Mon - Fri / 8AM - 5PM 
Union Position: No 
FTE: 1.000000 
Schedule: Full Time 
Salary: $31.25 - $42.98 depending on qualifications</div><div><div> 
</div></div></div><div>Description
Additional Position Details: FTE: 1.0 | Full Time | Primarily Mon - Fri / 8AM - 5PM
Salary Range: $65,000- $89,388
Work location: This is a remote, work-from-home position, where the ideal candidate must be self-motivated, disciplined, and capable of managing their time and resources effectively to meet security objectives and project deadlines in a healthcare-focused environment. Candidates will be required to have reliable broadband internet and personal cell phone service. Remote work may include working day-to-day operations during Pacific Standard business hours or online training. We currently do not offer remote work in Hawaii, New York, Vermont, New Jersey, or Pennsylvania. 
Position Summary
We are an exciting health care system that uses cutting-edge technologies and the latest apps. The Associate Systems Analyst works collaboratively with system engineers to provide technical support and consults with organizational clinicians, staff, and other support teams. Learning, supporting, and facilitating to the adoption and secure use of innovative healthcare and AI technologies is a vital function of this position. Key responsibilities for this role also include assisting with testing, problem identification, issue resolution, training, and software licensing audits for a variety of cloud and on-premises systems including Microsoft 365 (Teams, SharePoint, and Microsoft Office Apps, etc), Hyland OnBase, Luma Health, and Adobe.
Position Qualifications
Experience<ul><li>
Experience in cybersecurity, risk management, compliance, or GRC (internship or academic experience acceptable) is required</li><li>
Basic knowledge of HIPAA, HITRUST, NIST CSF, and other security compliance frameworks is required</li><li>
Strong attention to detail and ability to work with policy documentation and risk tracking tools is required</li><li>
Good communication and analytical skills for security risk assessments and compliance monitoring is required</li><li>
Familiarity with third-party risk management (TPRM) and security audit processes is preferred</li></ul>
Education<ul><li>
Associate&rsquo;s degree in Cybersecurity, Information Systems, Risk Management, or related field (or equivalent experience) is preferred</li></ul>
Certification/Licensure<ul><li>
Certifications such as Security+, CRISC, CISA, or HITRUST CCSFP (or willingness to obtain) is preferred</li></ul>
Total Rewards
We offer a comprehensive Total Rewards package designed to support your well-being and professional growth, including:<ul><li>
Competitive Pay: Hourly and salaried positions earn market-based compensation.</li><li>
Health &amp; Wellness: Medical, dental, and vision coverage for part-time and above employees and their eligible dependents beginning within 30 days of hire.</li><li>
Retirement Savings: Employer-sponsored retirement plan with company contribution and match.</li><li>
Paid Time Off: Generous ETO for part-time and above employees.</li><li>
Professional Development: Continue to enhance your education through our tuition reimbursement and tuition repayment program</li><li>
Additional Benefits: Life insurance, disability coverage, and employee assistance programs.</li></ul>
At Asante, we are guided by our values:
Excellence - Respect - Honesty - Service - Teamwork
Asante is proud to be an Equal Opportunity Employer. We are committed to creating a diverse and inclusive workplace and to employing and advancing qualified individuals of all backgrounds, including women, minorities, individuals with disabilities, and protected veterans.</div></div>

Associate Systems Analyst for the Enterprise Applications team

Search 1865+ Grc analyst jobs near you this May. New roles added regularly across leading industries. Apply today.