Senior Cyber GRC Analyst

SAIC

. Perform risk analysis using the NIST Risk Management Framework, including identifying risks, recommending mitigations, and tracking risks throughout their lifecycle .

Posted 11/4/2026full-timeRemote • Texas • United StatesSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Cyber Risk Management, including the NIST Risk Management Framework and SP800-53R4, with a strong focus on vulnerability assessment, compliance, and cybersecurity policy development. Proficient in coordinating audits, managing risks, and communicating effectively with stakeholders and senior management.

Highest-signal resume keywords

NIST Risk Management FrameworkCybersecurity Certification (CISSP or CRISC)Vulnerability Management & Compliance Scanning ToolsCybersecurity Assessments and AuditsCybersecurity in Data Center and Cloud Environments

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Risk AnalysisThreat ModelingVulnerability AssessmentCybersecurity Compliance AssessmentsCybersecurity Policy Development

Soft Skills

Excellent Oral CommunicationExcellent Written Communication

Tools & Technologies

TenableQualysServiceNow

Certifications & Qualifications

CISSPCRISCCompTIA Security+CEHCISACISMGSLCITIL Certification

Industry Keywords

SOC II Type 2 AuditsSystem Security PlansPOAMsBusiness ContinuityDisaster Recovery

Tech Stack

Tools & technologies

CloudCyber SecurityITSMServiceNow

About the role

Key responsibilities & impact

Perform risk analysis using the NIST Risk Management Framework, including identifying risks, recommending mitigations, and tracking risks throughout their lifecycle
Perform threat modeling and assessment
Analyze and assess vulnerability data from scanning tools, cyber intelligence, or other resources to determine validity, severity, and customer impact
Coordinate internal and external audit activities, including SOC II Type 2 audits
Design and coordinate implementation of cybersecurity controls with technical teams using NIST SP800-53R4 and other references
Coordinate and oversee development of system security plans and compliance with standards and policies
Assess risk for peer supplier systems and technologies and coordinate risk management and response activities
Maintain POAMs and supervise completion of assigned tasks and activities by others
Perform baseline cybersecurity compliance assessments against documented standards and requirements
Help ensure SAIC and in-scope systems are patched according to approved schedules and requirements
Provide input and assessment of new risks and recommend actions
Coordinate annual cybersecurity assessments across multiple vendors and service providers and produce consolidated assessment reports
Provide reports, communication, and engagement with stakeholders and management
Provide senior management and executive briefings, summaries, and reports on activities, assessments, and cybersecurity posture
Coordinate business continuity and disaster recovery activities
Lead maintenance of policies, procedures, and related job aid documentation

Requirements

What you’ll need

Bachelor’s Degree in related discipline and five (5) years related experience; OR, Master’s Degree and three (3) years of experience in a related discipline (e.g. Information Security)
U.S. Citizenship is required with the ability to pass a background check with finger printing
3-5 years of experience with cyber risk management including the NIST RMF and SP800-53R4
3-5 years of experience with cyber vulnerability and/or risk management
3-5 years of experience providing and coordinating cyber security assessments and audits
Cybersecurity certification (CISSP or CRISC preferred; alternatives include CompTIA Security+, CEH, CISA, CISM, GSLC)
Experience with the development and documentation of cybersecurity policies and standards
Cyber security in data center and cloud environments
Ability to create reports and visualizations to support Risk & Compliance activities
Excellent oral and written communication skills
Experience with Vulnerability Management & Compliance scanning tools such as Tenable or Qualys (preferred)
Experience with ITIL or ITIL certification (preferred)
Experience with ITSM/Reporting tools such as ServiceNow (preferred)