Information Security GRC Analyst

Requirements:

• 4–7 years of experience in information security, governance, risk and compliance (GRC), or audit and compliance support.
• Familiarity with frameworks and standards such as NIST 800-53, ISO 27001, SOC 2, HIPAA, PCI-DSS, or GDPR.
• Strong policy-writing skills, including the ability to produce clear, concise documentation.
• Experience supporting security audits and assembling evidence packages.
• Strong verbal and written communication, organization, analytical, problem-solving, and collaboration skills, including the ability to communicate with technical teams and executives.
• Knowledge of Agile processes and the ability to work independently, take initiative, learn technologies quickly, and meet strict deadlines in a fast-paced team environment.
• A bachelors degree focused on IT, Cybersecurity, Information Systems, or a related field, or an equivalent combination of education, experience, and knowledge.
• Preferred: Certifications such as CISSP, CISA, CISM, ISO 27001 Lead Implementer, or Security+.
• Knowledge of the OWASP Top 10, API security concepts such as OAuth2 and OpenID Connect, container security, application-layer threats and controls, CI/CD pipeline security, and secrets management practices.

Responsibilities:

• Develop, review, and maintain security policies, procedures, and standards aligned with applicable regulatory and industry frameworks.
• Work with IT, Legal, HR, and the central technology office to ensure security policies are practical, understood, and followed; manage policy versions and lifecycle.
• Lead or support responses to third-party and internal audits, customer security questionnaires, and compliance assessments, including working with external auditors.
• Gather and organize documentation, evidence, and technical input for audits and assessments such as SOC 2 and ISO 27001.
• Support risk assessments and control gap analyses across business units, help track corrective actions and remediation plans, and maintain risk and compliance reporting documentation.
• Help create and deliver staff security-awareness training, promoting policy adherence and a culture of security and compliance.
• Coordinate security scans with internal IT, including penetration and vulnerability testing, and review, interpret, and respond to findings.
• Review CI/CD pipeline configurations and secrets-management practices for compliance with security controls and policies.

Technologies:

• API
• CI/CD
• Support
• OWASP
• OpenID
• Security
• AWS
• Azure
• Cloud
• DevOps
• GitHub
• Jenkins

More

We are seeking a detail-oriented, analytical Information Security Analyst to join our security team in a governance, risk, and compliance-focused role. The pay range is $45.00–$50.00 per hour. We offer medical, dental, and vision coverage; a 401(k), HSA, disability and life insurance; paid sick leave where required by law; supplemental insurance, identity theft protection, pet insurance, wellness programs, an employee assistance program, and career development opportunities. Benefit eligibility and terms may vary by employment status, tenure, and location. Cynet Systems Inc., founded in 2010 and headquartered in the Washington, DC metro area, provides technology staffing and workforce solutions to organizations across the United States and Canada. We support clients in IT, engineering, life sciences, clinical, and professional staffing, and are certified as a Minority Business Enterprise. Our certifications include ISO 9001, ISO 14001, ISO 27001, and SOC 2 Type II.

last updated 43 week of 2026