Lead Cybersecurity Program Analyst

Kurv is seeking a motivated Lead Cybersecurity Program Analyst to support cybersecurity program development and day-to-day security operations in a developmental capacity. This onsite role in Cleveland, OH initially emphasizes building core program foundations, including asset inventory, ownership, and risk classification aligned to NIST Identify, while strengthening and supporting Kurv’s existing PCI DSS 4.0 program.

As the program analyst, you will contribute to governance and compliance activities, help maintain documentation and evidence for audit readiness, and support operational security tasks such as vulnerability and monitoring workflows. You will also work under the guidance of senior team members, growing toward increased program ownership over time.

Responsibilities

• Build and maintain an enterprise asset inventory across systems, applications, vendors, and data flows
• Document system ownership, classification, and risk tiering
• Support ongoing PCI scope validation and data flow documentation
• Assist with mapping and alignment of existing controls to NIST CSF and PCI DSS 4.0
• Maintain cybersecurity policies, standards, and supporting documentation
• Track updates to the cybersecurity risk register and related governance activities
• Contribute to reporting, metrics, and audit readiness efforts
• Support vulnerability scanning and remediation tracking
• Assist with log monitoring and alert review
• Perform file integrity and change validation
• Identify and escalate anomalies or control gaps
• Support user access reviews and identity governance activities
• Assist with cloud security monitoring and configuration tracking (AWS)
• Maintain incident response documentation and support incident response exercises
• Support ongoing PCI DSS compliance activities through documentation, evidence collection, and coordination
• Maintain organized audit evidence repositories and supporting artifacts
• Track audit requests, timelines, and deliverables
• Assist with preparing standard evidence submissions for audits and reviews
• Support security awareness and training tracking
• Partner cross-functionally with IT, Engineering, Compliance, and Operations teams
• Reinforce alignment between security controls and business processes
• Work under senior guidance to learn and contribute to PCI and cybersecurity program ownership over time

Requirements

• Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, Risk Management, or a related field
• Strong analytical, organizational, and documentation skills
• High attention to detail and accountability
• Clear written and verbal communication skills
• Interest in cybersecurity governance, risk, and compliance

Technologies

• NIST Cybersecurity Framework (CSF)
• PCI DSS 4.0
• NIST Identify
• AWS
• SOC 2
• ISO 27001
• Security+

Benefits

• 401(k)
• Dental insurance
• Health savings account
• Vision insurance

Professional Development

• NIST Cybersecurity Framework
• PCI DSS fundamentals
• Foundational cybersecurity certifications (e.g., Security+)
• Governance, Risk, and Compliance (GRC) career path