CyberSecurity Analyst II

• Contribute to the implementation of an integrated Governance, Risk, and Compliance (GRC) program and tools to support GRC workflows, which align with organizational objectives and regulatory requirements.

• Develop and enforce enterprise-wide information security policies, standards, and procedures to support robust information security and operational resilience, including processes to manage exceptions to policies and standards.

• Perform risk assessments, including business impact assessments, third party risk assessments, and assessments of cloud systems. Synthesize data to inform senior leadership on security posture, resilience gaps, and emerging threats.

• Contribute to the prioritization and deployment of risk mitigation strategies using risk quantification methodologies, ensuring a coordinated response across business units and with external partners.

• Advance the culture of compliance and resilience by conducting enterprise-level information security awareness and business resilience training campaigns and tabletop exercises.

• Collaborate with cross-functional teams to integrate information security best practices and regulatory requirements into operational policies and procedures both within and beyond the immediate job area.

• Mentor and coach GRC analysts, fostering operational excellence and professional growth within the GRC organization.

• Develop executive dashboards and data pipelines to measure and communicate risk trends, compliance metrics, and strategic security objectives to senior stakeholders.

• Bachelor’s Degree in a science, technology, engineering, or math discipline or

• High School Diploma/GED and preferred certifications.

• 5 years related work experience