Location: Allentown, PA (Hybrid) orHouston, Texas (Hybrid)We are seeking a skilled and proactive Cybersecurity GRC (Governance, Risk, and Compliance) Analyst to join our dynamic cybersecurity team. The GRC Analyst will play a critical role in identifying, managing, and mitigating risks related to information security and ensuring compliance with industry standards, regulations, and internal policies. The ideal candidate will have experience in cyber security risk management, regulatory compliance, and governance frameworks, with a keen ability to analyze, report, and provide actionable insights.Key Responsibilities:<ul><li>Governance: Support the development and implementation of security governance frameworks and policies to ensure alignment with organizational goals and regulatory requirements.</li><li>Risk Management: Identify, assess, and monitor cybersecurity risks within the organization, ensuring effective mitigation strategies are in place and risks are documented.</li><li>Compliance: Assist in ensuring compliance with relevant laws, regulations (such as NERC, SOX, HIPAA, CMMC), and industry standards (ISO 27001, NIST, etc.). Conduct periodic audits and prepare compliance reports. Coordinate internal and external audits, including communication, walkthroughs, control testing and evidence gathering.</li><li>Security Controls: Evaluate existing security controls, policies, and procedures to identify gaps and recommend improvements.</li><li>Incident Response: Participate in incident response planning and provide support during investigations related to security breaches or compliance violations.</li><li>Vendor Risk Management: Assess third-party security risks and collaborate with other teams to evaluate vendor security posture.</li><li>Reporting and Documentation: Prepare detailed risk assessments, compliance reports, and audit findings for senior management and other stakeholders.</li><li>Training &amp; Awareness: Support the development and delivery of security awareness and training programs for staff and stakeholders to foster a strong security culture.</li></ul>Qualifications:<ul><li>Bachelor’s degree in Cybersecurity, Information Technology, Risk Management, or a related field (or equivalent work experience).</li><li>10+ years of cybersecurity-related experience.</li><li>Strong understanding of cybersecurity frameworks and standards (e.g., NIST, ISO 27001, COBIT, SOC 2, etc.).</li><li>Relevant certifications such as CISSP, CISA, CRISC, or CISM are highly preferred.</li><li>Familiarity with security tools, risk management platforms, and compliance monitoring systems (SailPoint, ServiceNowGRC, AuditBoard, Abnormal AI, Proofpoint Security Awareness etc.)</li><li>Knowledge of compliance regulations (NERC, NRC, HIPAA, etc.) and risk management practices.</li><li>Proven ability to evaluate complex security risks and communicate findings effectively to non-technical stakeholders.</li><li>Strong analytical, organizational, and problem-solving skills.</li><li>Excellent written and verbal communication skills are crucial for translating complex technical and regulatory issues to both technical and non-technical audiences.</li><li>Ability to work effectively with cross-functional teams, including IT, legal and business unit leaders.</li><li>Hands-on GRC experience and a demonstrated ability to align risk management strategies with overarching business objectives.</li></ul>Preferred Skills:<ul><li>Experience with cloud security, IT governance, and data privacy.</li><li>Knowledge of threat intelligence and vulnerability management.  </li><li>Ability to work in a collaborative, fast-paced environment with cross-functional teams.</li></ul>Note: You will have an opportunity to add attachments to your application. Please use this opportunity to upload your resume, cover letter, and any relevant documents .

<div class="vc_row wpb_row vc_row-fluid vc_custom_1539771905320 vc_row-has-padding-top vc_row-has-padding-bottom vc_row-bg-position-top" data-vc-full-width="true" data-vc-full-width-init="true">
<div class="wpb_column vc_column_container vc_col-sm-12 vc_col-lg-6">
<div class="vc_column-inner vc_custom_1541586975592">
<div class="wpb_wrapper">
Susquehanna employees are some of the most highly skilled professionals in the industry and have a wide range of backgrounds that help them perform their jobs safely and efficiently. Our employees hone their skills through accredited training programs offered onsite and at industry workshops and conferences. Many employees are part of the plant&rsquo;s extensive emergency plan, either staffing positions for Susquehanna or volunteering at local emergency operation centers throughout the 10-mile radius surrounding the station. Most of our employees live in nearby communities and donate thousands of dollars to nonprofit organizations, including the United Way, as well as many other worthwhile community projects.
</div>
</div>
</div>
</div>

Cybersecurity GRC (Governance, Risk, and Compliance) Analyst

Location: Allentown, PA (Hybrid) orHouston, Texas (Hybrid)We are seeking a skilled and proactive Cybersecurity GRC (Governance, Risk, and Compliance) Analyst to join our dynamic cybersecurity team. The GRC Analyst will play a critical role in identifying, managing, and mitigating risks related to information security and ensuring compliance with industry standards, regulations, and internal policies. The ideal candidate will have experience in cyber security risk management, regulatory compliance, and governance frameworks, with a keen ability to analyze, report, and provide actionable insights.Key Responsibilities:<ul><li>Governance: Support the development and implementation of security governance frameworks and policies to ensure alignment with organizational goals and regulatory requirements.</li><li>Risk Management: Identify, assess, and monitor cybersecurity risks within the organization, ensuring effective mitigation strategies are in place and risks are documented.</li><li>Compliance: Assist in ensuring compliance with relevant laws, regulations (such as NERC, SOX, HIPAA, CMMC), and industry standards (ISO 27001, NIST, etc.). Conduct periodic audits and prepare compliance reports. Coordinate internal and external audits, including communication, walkthroughs, control testing and evidence gathering.</li><li>Security Controls: Evaluate existing security controls, policies, and procedures to identify gaps and recommend improvements.</li><li>Incident Response: Participate in incident response planning and provide support during investigations related to security breaches or compliance violations.</li><li>Vendor Risk Management: Assess third-party security risks and collaborate with other teams to evaluate vendor security posture.</li><li>Reporting and Documentation: Prepare detailed risk assessments, compliance reports, and audit findings for senior management and other stakeholders.</li><li>Training &amp; Awareness: Support the development and delivery of security awareness and training programs for staff and stakeholders to foster a strong security culture.</li></ul>Qualifications:<ul><li>Bachelor’s degree in Cybersecurity, Information Technology, Risk Management, or a related field (or equivalent work experience).</li><li>10+ years of cybersecurity-related experience.</li><li>Strong understanding of cybersecurity frameworks and standards (e.g., NIST, ISO 27001, COBIT, SOC 2, etc.).</li><li>Relevant certifications such as CISSP, CISA, CRISC, or CISM are highly preferred.</li><li>Familiarity with security tools, risk management platforms, and compliance monitoring systems (SailPoint, ServiceNowGRC, AuditBoard, Abnormal AI, Proofpoint Security Awareness etc.)</li><li>Knowledge of compliance regulations (NERC, NRC, HIPAA, etc.) and risk management practices.</li><li>Proven ability to evaluate complex security risks and communicate findings effectively to non-technical stakeholders.</li><li>Strong analytical, organizational, and problem-solving skills.</li><li>Excellent written and verbal communication skills are crucial for translating complex technical and regulatory issues to both technical and non-technical audiences.</li><li>Ability to work effectively with cross-functional teams, including IT, legal and business unit leaders.</li><li>Hands-on GRC experience and a demonstrated ability to align risk management strategies with overarching business objectives.</li></ul>Preferred Skills:<ul><li>Experience with cloud security, IT governance, and data privacy.</li><li>Knowledge of threat intelligence and vulnerability management. &nbsp;</li><li>Ability to work in a collaborative, fast-paced environment with cross-functional teams.</li></ul>Note:&nbsp;You will have an opportunity to add attachments to your application. Please use this opportunity to&nbsp;upload your resume, cover letter, and any relevant documents .

Cybersecurity GRC (Governance, Risk, and Compliance) Analyst

About the Job

About the Company

Susquehanna Steam Electric Station

Similar Jobs

Director, Cybersecurity Architecture

Director, Cybersecurity Architecture

Vice President Information Security (f/m/d)

Vice President Information Security (f/m/d)

IT/OT Security Analyst

IT/OT Security Analyst

Director, Cybersecurity & Risk

Director, Cybersecurity & Risk

Cyber Security Risk Manager

Cyber Security Risk Manager

Cybersecurity Architect

Cybersecurity Architect

Cybersecurity Architect

Cybersecurity Architect

Cybersecurity Architect

Cybersecurity Architect

Cybersecurity Architect

Cybersecurity Architect

Cybersecurity Engineer

Cybersecurity Engineer