GRC Security Analyst

Robert Half is searching for a GRC Security Analyst to join an online brokerage company based in Bellevue, WA. This GRC Security Analyst will be responsible for managing exception policies, conducting risk assessments, and ensuring compliance with cybersecurity standards. This position is a 6 month contract opportunity with the potential to extend and is 100% Remote. Apply today!

Details:

Schedule: Monday - Friday Core Hours (Flexible)

Duration: 6 month contract with the potential to extend

Location: Remote - Anywhere in the U.S.

• Preferred if candidates are located in WA, NY, CA AND D.C. (1 day onsite)

Responsibilities:

• Oversee the policy exception lifecycle, including intake, triage, risk evaluation, approvals, and ongoing monitoring.
• Ensure submitted requests are accurate, complete, and contain high-quality data for effective processing.
• Apply thorough knowledge of security risk ratings in accordance with organizational guidelines and business needs.
• Collaborate with the Program Lead to track operational metrics and prepare detailed reports.
• Conduct control testing focused on cybersecurity risks, documenting procedures, results, and remediation actions.
• Work closely with control owners to validate the design and operational effectiveness of controls.
• Maintain and update organizational documentation, procedures, and control language to reflect current standards.
• Support routine operational tasks, housekeeping, and initiatives aimed at process improvement.
• Explore automation solutions for exception management and control testing workflows.
• Utilize tools such as LogicGate, ServiceNow, and JIRA to streamline operational processes.

• 5+ years of experience in a Security Analyst position or related role.
• Strong Fundamental knowledge of Cybersecurity and GRC standards.
• Proficient in Exception testing lifecycle.
• Experienced in Risk Management & Control Testing
• Automation solutions in Exceptions and control testing
• Experienced in tools such as LogicGate, ServiceNow, and JIRA for tracking purposes.