Cybersecurity Analyst

Job Description:

Cybersecurity GRC Analyst

As a Cybersecurity GRC Analyst, you will play a crucial role in partnering with customers to identify and proactively mitigate security vulnerabilities and audit information security processes and procedures. This individual will be responsible for monitoring and analyzing alerts and events from systems like endpoint protection, IDS/IPS, email security, SIEM, and cloud-native security services.

Key Responsibilities:

• Monitor and analyze alerts and events from systems like endpoint protection, IDS/IPS, & email security, SIEM, and cloud-native security services.

• Work with customers to identify and proactively mitigate security vulnerabilities and audit information security processes and procedures.

• Assist with day-to-day operations and data collection/analysis of SOC platform.

• Develop, maintain, and report on security operations metrics.

• Assist with assessing/maintaining compliance with frameworks including SOC, PCI, HIPPA, CMMC, NIST ETC. leading up to passing annual assessments performed by an external auditors.

• Perform third-party risk management activities.

• Assist with cyber/logical and physical security audits, review findings, and recommend and perform corrective actions.

• Assist with developing and implementing security awareness & training programs for clients.

• Draft and propose information security strategy and action plans based on framework assessments and gap analysis.

• Develop, publish, and maintain comprehensive information security policies, procedures, and guidelines.

Qualifications:

• 3+ years of relevant cybersecurity GRC experience.

• Relevant cybersecurity certifications (e.g., CISSP, CISM, CISA, CRISC are preferred)

• Knowledge of risk and security industry literature and knowledge bases (OWASP, MITRE ATT&CK, NIST 800-39)

• Experience in conducting or reviewing risk assessments using industry leading frameworks (NIST CSF & 800-53, ISO27001, SOC, CMMC etc.)

• Experience in enterprise risk management and risk mitigation.

• Substantial working knowledge of security personnel and security concepts at all layers of a technology stack in modern technologies/environments.

• Strong analytical skills with the ability to assess and prioritize security risks and cyber security compliance requirements based on business impact.

• Excellent communication and interpersonal skills, with the ability to effectively engage with technical and non-technical stakeholders at all levels of the organization.

• Proven ability to work independently and collaboratively in a dynamic environment, managing multiple priorities and deadlines effectively.

• Commitment to continuous learning and professional development, staying abreast of industry trends and emerging technologies in cybersecurity and cyber security compliance.

Aqueduct Technologies is committed to developing a diverse and talented team. We celebrate and support diversity and are committed to making an inclusive environment for all employees and applicants including women, minorities, individuals with disabilities, members of the LGBTQIA community, veterans, and any other legally protected group. We are an Equal Opportunity Employer and do not discriminate against any employee or applicant on the basis of any status protected by federal, state, or local laws.

Aqueduct Technologies is one of the largest IT solutions providers in the US, recognized for our relentless pursuit of customer satisfaction, our corporate culture, technology leadership, and our commitment to the local community. We pride ourselves on our world-class engineering, the investments we make in our employees and our systems, and on our loyal base of customers and manufacturers. Recognized as one of the fastest-growing, private companies in Massachusetts-and awarded the Best Place to Work in Boston for seven, consecutive years-there is no better time to join Aqueduct than now!