Senior Cyber GRC Analyst

SAIC

. Perform risk analysis using the NIST Risk Management Framework and standards-based guidance .

Posted 10/19/2026full-timeRemote • Texas • United StatesSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Cyber Risk Management, including the NIST Risk Management Framework and SP800-53, with a strong focus on vulnerability assessment, compliance, and cybersecurity policy development. Proven ability to coordinate audits, manage cybersecurity controls, and communicate effectively with stakeholders and senior management.

Highest-signal resume keywords

NIST Risk Management FrameworkCybersecurity Certification (CISSP or CRISC)Cyber Vulnerability ManagementCybersecurity Assessments and AuditsData Center and Cloud Security

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Risk AnalysisThreat ModelingVulnerability AssessmentCybersecurity CompliancePolicy DevelopmentAudit CoordinationRisk ManagementCybersecurity Controls ImplementationBaseline AssessmentsBusiness Continuity Planning

Soft Skills

Excellent Oral CommunicationExcellent Written Communication

Tools & Technologies

TenableQualysServiceNowITIL

Certifications & Qualifications

CISSPCRISCCompTIA Security+CEHCISACISMGSLC

Industry Keywords

SOC II Type 2 AuditsCybersecurity PosturePOAMsRisk & Compliance ActivitiesCybersecurity Policies and Standards

Tech Stack

Tools & technologies

CloudCyber SecurityITSMServiceNow

About the role

Key responsibilities & impact

Perform risk analysis using the NIST Risk Management Framework and standards-based guidance
Perform threat modeling and assessment
Analyze vulnerability data from scanning tools, cyber intelligence, and other resources
Coordinate internal and external audit activities, including SOC II Type 2 audits
Design and coordinate implementation of cybersecurity controls using NIST SP800-53 r4
Coordinate development of system security plans and compliance with standards and policies
Assess supplier systems and technologies and coordinate risk management and response activities
Maintain POAMs and supervise completion of assigned tasks and activities
Perform baseline assessments of cybersecurity compliance
Help ensure systems are patched according to approved schedules and requirements
Assess new risks and recommend actions
Coordinate annual cybersecurity assessments across vendors and service providers and produce consolidated reports
Provide reports, communication, and engagement with stakeholders and management
Provide senior management and executive briefings, summaries, and reports on cybersecurity posture
Coordinate business continuity and disaster recovery activities
Lead maintenance of policies, procedures, and related job aid documentation
Report to the Technical Director as part of the team providing security planning, management, and oversight for data center and cloud services

Requirements

What you’ll need

Bachelor’s Degree in related discipline and five (5) years related experience; OR, Master’s Degree and three (3) years of experience in a related discipline (e.g. Information Security)
3-5 years of experience with cyber risk management including the NIST RMF and SP800-53R4
3-5 years of experience with cyber vulnerability and/or risk management
3-5 years of experience providing and coordinating cyber security assessments and audits
Cybersecurity certification (CISSP or CRISC preferred; alternatives include CompTIA Security+, CEH, CISA, CISM, GSLC)
Experience with the development and documentation of cybersecurity policies and standards
Cyber security experience in data center and cloud environments
Ability to create reports and visualizations to support Risk & Compliance activities
Excellent oral and written communication skills
Preferred: Experience with Vulnerability Management & Compliance scanning tools such as Tenable or Qualys
Preferred: Experience with ITIL or ITIL certification
Preferred: Experience with ITSM/Reporting tools such as ServiceNow
Program work must be performed within the United States