Senior Cybersecurity and GRC Analyst
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior cybersecurity analyst protecting Conjointly’s all-in-one survey research platform. Supporting SOC 2, ISO 27001 and ISO 27701 governance, risk and compliance.
Responsibilities:
- Plan and coordinate cybersecurity activities across the business and keep security policies and procedures aligned with best practice.
- Monitor and triage security alerts across environments, logging and monitoring tools, and endpoints; strengthen monitoring including centralised log monitoring.
- Investigate phishing, unusual logins, malware and emerging threats.
- Run vulnerability scans, validate and triage findings and bug bounty reports, and work with developers on fixes.
- Oversee and review user access, including privileged accounts and timely removal of leavers’ access.
- Identify and assess cybersecurity risks and follow up with owners until issues are closed.
- Recommend, tune and monitor security controls.
- Investigate, document and coordinate responses to security incidents and contribute to post-incident reviews.
- Run security awareness training and phishing simulations.
- Maintain incident logs and risk reports and present cybersecurity updates at the annual management meeting.
- Complete supplier and customer security questionnaires and compliance requests.
- Arrange penetration tests and liaise with testers.
- Supply technical evidence for SOC 2, ISO/IEC 27001 and ISO/IEC 27701 audits and keep security documentation audit-ready.
- Run the risk management meeting and keep the risk register up to date.
Requirements:
- Degree in Computer Science, IT, Cybersecurity or a related field, or equivalent experience.
- At least one cybersecurity certification is required, such as CISSP, CompTIA CySA+, GIAC (GCIH or GSEC) or a cloud security certification.
- 5+ years of hands-on cybersecurity experience, including security operations, vulnerability management and incident response; experience in a larger or regulated organisation is preferred.
- Strong knowledge of cloud, network, endpoint, identity and application security.
- Hands-on experience with AWS security services, log monitoring, endpoint management and protection, and vulnerability scanning tools; SIEM and EDR experience is highly regarded.
- Familiarity with SOC 2, ISO/IEC 27001 and ISO/IEC 27701, including audit evidence and security questionnaires.
- Independent, cautious and thorough, with the persistence to follow up with colleagues at all levels until work is done.
- Able to explain risk clearly to non-technical staff and present to management.
Benefits:
- Opportunity to grow into a security leadership role.
- Engaging and dynamic team working towards a common mission.
- Competitive salary.
- Sponsorship of annual maintenance and membership fees for relevant cybersecurity certifications.
Similar Jobs
Occupational Health Governance and Contract Lead
UK Occupational Health governance and contract lead overseeing outsourced services for GSK, a global biopharma company. Managing suppliers, compliance, performance, budgets and service improvements.
Practice Lead, Fraud, Trust and Safety
Practice Lead owning fraud and trust-and-safety consulting delivery, client confidence, and practice growth. Leading teams and advising complex organizations through FiveBy’s fully remote consultancy.
GRC Analyst
GRC Analyst strengthening RxBenefits’ healthcare compliance, risk, and security controls. Managing audits, assessments, GRC records, vendors, and executive risk reporting.
Risk Adjustment Program Lead
Risk adjustment program lead improving Medicare Advantage and ACA performance for Capital Blue Cross. Analyzing results, coordinating vendors, and driving operational initiatives.
Data Governance Analyst
Data Governance & Analytics Analyst governing enterprise data for AFL, a fiber-optic cable and connectivity manufacturer. Developing analytics, dashboards, AI-enabled insights, and data quality frameworks.
Clinical Data Risk Analyst
Clinical Data Risk Analyst assessing clinical-trial data risks for ICON, a global healthcare intelligence and clinical research organization. Ensuring data integrity, compliance, and risk mitigation across Mexico and Colombia.
Senior Risk Analyst
Senior Risk Analyst overseeing merchant collections, ACH funding returns, and fraud investigations. Supporting CSG, a provider of customer-connection and payment technologies.
Senior Manager, Risk Adjustment Market Performance
Senior Manager delivering risk adjustment initiatives for Navvis healthcare markets. Improving risk capture, analytics, provider workflows, compliance, and measurable performance outcomes.
Risk Claims Manager
Risk Claims Manager managing auto liability, property damage, and workers’ compensation claims for a freight transportation company. Investigating losses, coordinating insurers and counsel, and reducing claim exposure.
Senior SAP Master Data Governance, MDG Consultant
Senior SAP MDG consultant designing and governing S/4HANA master data solutions for C5MI’s federal modernization programs. Leading architecture, replication, compliance, and client delivery.
Local Political Expert – Elections Forecasting, Political Risk
Local Iowa political expert producing point-in-time election forecasts and political-risk analysis. Mercor uses expert data to train and improve frontier AI models.
Local Political Expert – Elections Forecasting, Political Risk
Iowa political expert authoring election forecasts and political-risk reports for Mercor. Producing point-in-time judgments to train and evaluate frontier AI models.
Senior Security Risk Analyst, GRC
Senior Security Risk Analyst managing security risk, controls, and GRC reporting for DoorDash’s technology and logistics marketplace. Automating risk workflows and shaping proactive risk management.
Operational Risk Manager – Technology, Payments Operations
Operational Risk Manager building zerohash’s operational risk framework for crypto and stablecoin infrastructure. Leading RCSA, FAIR scenario analysis, loss events, and technology incident oversight.
Fraud Risk Analyst II
Fraud Risk Analyst II overseeing fintech partner fraud reviews for Coastal’s Banking-as-a-Service platform. Monitoring events, compliance risks, and automation outputs.
Quality Control Manager – Risk, Anti-Fraud
Quality Control Manager auditing risk and anti-fraud cases for RISK, an international iGaming company. Monitoring KPIs, identifying systemic errors, and improving operational quality frameworks.
Data Integration and Governance Analyst
Data integration analyst improving automated pipelines and migrating legacy systems for WBL, a provider of short-term commercial loans. Ensuring data quality, reliability, and continuity across business systems.
Senior Corporate Sales Manager – High Risk
Senior Corporate Sales Manager building DNA Payments’ high-risk merchant acquiring business. Winning regulated merchants and partner channels across UK/EU sectors including gaming, healthcare and CBD.
Governance Coordinator
Governance Coordinator supporting BD’s medical technology governance, documentation, and archival processes. Coordinating stakeholders and audits for Swiss HQ operating models in an international environment.
Principal, Data Governance Platforms
Principal architecting enterprise data governance platforms for Alignment Health, a healthcare company serving seniors and chronically ill patients. Leading metadata, MDM, data quality, and lineage capabilities.