Cyber Security Analyst

Simpalm is hiring for this role on behalf of one of its direct clients in the United States. Our client is seeking a Cybersecurity Compliance Analyst to join its expanding Cybersecurity Governance, Risk, and Compliance (GRC) team. In this role, you will help ensure that cybersecurity controls, processes, and technologies remain aligned with regulatory requirements, industry standards, and organizational policies.

Key Responsibilities:

• Support the organization’s cybersecurity GRC program.
• Track and coordinate remediation of cybersecurity risks, vulnerabilities, and audit findings.
• Assist with IT and cybersecurity risk assessments.
• Support internal and external audits, including evidence collection, control walkthroughs, and issue remediation.
• Monitor adherence to cybersecurity policies, standards, and regulatory requirements.
• Review security controls and document assessment results.
• Maintain risk, compliance, and remediation records within the GRC platform.
• Collaborate with stakeholders to improve control effectiveness and reduce organizational risk.
• Contribute to compliance reporting, metrics, and dashboards.
• Stay current on cybersecurity regulations, industry standards, and emerging risks.
• Support cybersecurity compliance awareness, training, and communication initiatives.

Required Qualifications:

• Bachelor’s degree in Cybersecurity, Information Technology, Information Systems, Business, Audit, Accounting, or a related field.
• 2–5 years of experience in cybersecurity compliance, IT compliance, IT audit, information security, risk management, or a related discipline.
• Working knowledge of cybersecurity and control frameworks, including:
• NIST Cybersecurity Framework (CSF)
• SOX IT General Controls (ITGC)
• Solid understanding of cybersecurity principles, vulnerabilities, threats, and risk management concepts.
• Strong analytical, organizational, and problem-solving skills.
• Excellent verbal and written communication skills.
• Proven ability to manage multiple projects and deadlines.

Preferred Qualifications:

• One or more professional certifications: CISA, Security+, CRISC, CISSP (or Associate of ISC2), or CISM.
• Experience with GRC platforms such as Onspring, Archer, ServiceNow GRC, or AuditBoard.
• Experience supporting SOX compliance and control testing.
• Familiarity with vulnerability management tools such as Tenable, Qualys, Rapid7, or Microsoft Defender.
• Experience with third-party risk management and vendor assessments.
• Exposure to Power BI, data analytics, or cybersecurity reporting.

What Success Looks Like:

• Timely remediation of cybersecurity risks and audit findings.
• Consistently audit-ready compliance documentation.
• Improved visibility into organizational cyber risk through effective reporting and metrics.
• Stronger cybersecurity governance processes and greater compliance maturity.
• A lasting contribution to a culture of security, accountability, and continuous improvement.

Why Join:

• Work on enterprise-wide cybersecurity and compliance initiatives.
• Gain exposure to executive leadership, audit, and regulatory programs.
• Grow your career within Governance, Risk, and Compliance (GRC).
• Join a collaborative team focused on innovation and continuous improvement.
• Help shape the organization’s cybersecurity and risk management strategy.