Hi,
Hope you are doing well.
This is Tahir from Drevol LLC. Please find below the job description for your reference and please let me know if you are interested in this position.
Job Title: Cybersecurity GRC Analyst
Location: Malvern , PA / Plano, TX (Hybrid)
Duration: 12 Months
Qualifications
8+ years of experience in cybersecurity, risk management, GRC, controls design, internal audit, or related disciplines, preferably within financial services or another highly regulated industry. Demonstrated experience designing, enhancing, or transforming cybersecurity controls and translating policies, standards, risks, audit findings, and regulatory requirements into effective control designs.
Robust understanding of the control lifecycle, including design, implementation, testing, monitoring, and remediation. Experience with recognized cybersecurity/control frameworks such as NIST CSF, NIST 800-53, ISO 27002, CIS Controls, and/or COBIT.
Robust analytical, documentation, facilitation, and stakeholder-management skills. Experience with control automation or Continuous Controls Monitoring is preferred.
Preferred: Experience supporting large-scale GRC modernization, control transformation, or cybersecurity governance initiatives; developing control libraries, taxonomies, framework mappings, or enterprise control standards; and designing controls with automation and Continuous Controls Monitoring (CCM) in mind. Knowledge of NIST CSF, NIST 800-53, ISO 27002, CIS Controls, and/or COBIT preferred. Consulting, risk advisory, internal audit, or Big Four experience is robust preferred.
Professional certifications such as CISSP, CISM, CISA, CRISC, CIA, or CPA are a plus.
