Nist Frameworks

Nist Frameworks Cybersecurity Jobs

3 jobs found

1d ago

Senior Cybersecurity GRC Analyst

REPAY Atlanta, GA

Atlanta, GA

1d ago

Full time Senior Cybersecurity Tools GRC

Apply Now

Job Description

At REPAY, the Senior Cybersecurity GRC Analyst plays a central role in strengthening how the organization manages compliance, risk reporting, and evidence workflows. Reporting to the Manager of Cybersecurity GRC, this position focuses on GRC tool automation, Identity Governance and Administration (IGA) implementation, and improving how security posture information is delivered to internal and external stakeholders.

This onsite role is based in Atlanta, GA and centers on integrating and automating evidence/control processes across systems, improving risk visibility for senior leadership, and keeping customer-facing trust materials up to date.

Responsibilities

Partner with stakeholders to design, document, and enforce security policies, standards, and controls.
Align security practices with NIST CSF, NIST SP800-53, PCI-DSS, and SOC 2.
Automate the collection, validation, and continuous monitoring of control evidence from source systems and platforms to reduce manual evidence requests and keep evidence current.
Map controls once to multiple frameworks so that a single automated evidence stream supports NIST CSF, PCI-DSS, SOC 2, and SOX requirements.
Automate and present risk reports and dashboards for senior management to deliver actionable insight into organizational risk posture and compliance.
Work closely with the corporate compliance team to support cybersecurity questionnaires from clients, and improve and automate the client questionnaire workflow.
Serve as a subject matter expert during client and regulatory discussions across GRC and risk management topics.
Collaborate with platform owners and stakeholders to implement controls and security best practices.
Identify gaps, redundancies, and integration opportunities across the current cybersecurity and GRC technology stack, then recommend and implement enhancements.
Automate GRC workflows within existing GRC platforms, including control testing, evidence collection, policy attestations, risk register updates, and compliance reporting.
Lead or support Identity Governance and Administration (IGA) implementation and optimization, including access certifications, role-based access, joiner/mover/leaver workflows, and segregation of duties controls that support SOX, SOC 2, and PCI-DSS.
Support the phishing program, including simulation and awareness campaigns, user-reported phishing triage, and effectiveness metrics feeding into risk reporting.
Build integrations and automated data flows between GRC, IGA, ticketing, and security tools using APIs, scripting, or low-code approaches to reduce manual effort and improve data quality.
Develop business cases, roadmaps, and success metrics for tooling improvements, and track adoption and return on investment.
Own and enhance the customer-facing Trust Center by keeping security documentation, certifications (including SOC 2), policies, and standard questionnaire responses current, and streamlining customer access requests.

Requirements

Bachelor’s degree in computer science, Information Systems, or related field.
Cybersecurity certifications (e.g., CISSP, CISM, CISA) are a plus.
3+ years of experience in GRC roles, including hands-on GRC tool implementation and automation, preferably in technology organizations in financial services or related industries.
Hands-on experience supporting security compliance programs and associated tools across on-premises and cloud environments.
Experience managing projects, including timelines, resources, and stakeholder coordination.
Hands-on experience automating GRC processes and workflows within GRC platforms, such as control testing, evidence collection, and risk and compliance reporting.
Experience implementing IGA solutions (e.g., SailPoint, Saviynt, Okta Identity Governance, Microsoft Entra ID Governance), including access reviews and identity lifecycle workflows.
Experience supporting phishing prevention, simulation, and response programs (e.g., KnowBe4, Proofpoint, Microsoft Defender for Office 365).
Demonstrated ability to assess an existing security technology stack and drive measurable improvements through optimization, integration, and automation.
Experience managing or implementing a customer-facing Trust Center (e.g., SafeBase, Conveyor, Vanta Trust Center) to share security posture and compliance documentation with customers.
Strong understanding of SOX, AICPA SOC 1 and SOC 2, and PCI-DSS, as well as cybersecurity frameworks such as NIST CSF and NIST SP800-53.
Proficiency with GRC tools such as Hyperproof, Archer, ServiceNow, or similar platforms, including workflow and automation configuration.
Working knowledge of APIs, scripting (e.g., Python, PowerShell), or low-code tools to integrate and automate security and GRC platforms.
Strong understanding of software development practices and cloud environments to build credibility with technical teams.
Advanced expertise in Microsoft Excel and other office tools.
Exceptional presentation and communication skills.
Familiarity with reporting tools such as PowerBI or Sisense is a plus.
Ability to identify risk within technology solution architecture and design.
Ability to create and present actionable risk reports and dashboards for senior leadership.
Demonstrated ability to drive cross-team collaboration and deliver impactful change.
Self-motivated and focused on continuous improvement, with strong ownership of outcomes.
Ability to operate independently and create or adapt processes to meet organizational needs.
Analytical, pragmatic approach, including assessing problems, identifying root causes, and recommending solutions.
Collaborative mindset to work effectively with Engineering, IT Operations, Security, and Compliance.

Technologies

NIST CSF, NIST SP800-53, PCI-DSS, SOC 2, SOX
GRC tool automation
Identity Governance and Administration (IGA), SailPoint, Saviynt, Okta Identity Governance, Microsoft Entra ID Governance
Hyperproof, Archer, ServiceNow
APIs, Python, PowerShell, low-code tools, Scripting
AICPA SOC 1
Microsoft Excel, PowerBI, Sisense
KnowBe4, Proofpoint, Microsoft Defender for Office 365
Trust Center, SafeBase, Conveyor, Vanta Trust Center
Role-based access, joiner/mover/leaver workflows, segregation of duties controls, access certifications

Benefits

100% coverage of employee healthcare premiums
Life insurance
Disability insurance
Work-life balance resources
401(k) with employer match
Employee Stock Purchase Plan
Annual Bonus Program
All benefits go into effect day one

View full job page →

8d ago

Cybersecurity Analyst - Risk and Controls

Sherwin-Williams Cleveland, OH 🇺🇸 Remote

Cleveland, OH

8d ago

$82k - $104k/yr Full time Data Security Information Security InfoSec

Apply Now

Job Description

The ER&R Risk Analyst role at Sherwin-Williams is focused on finding, evaluating, and communicating enterprise cybersecurity risk through IT risk assessments. Working across ER&R and Enterprise Technology, you will help prioritize risk, support mitigation planning, and maintain the documentation and policy work needed to strengthen the organization’s cybersecurity posture.

Based in Cleveland, OH (remote), this position supports risk identification across internal and external environments, including privacy and data security considerations tied to business processes, applications, and vendors.

Key Responsibilities

Partner with ER&R and Enterprise Technology teams to identify and contain internal and external risks.
Develop an in-depth understanding of business processes, applications, standard programs, and reports as they relate to privacy and data security.
Lead analysis of complex business processes or issues, quickly connecting business needs with privacy and data challenges.
Conduct risk assessments for new and existing technologies, data processing activities, policy exceptions, and non-compliant third-party vendors.
Spot process improvement opportunities, define improvement requirements, perform detailed analysis, and act as a liaison between business stakeholders and development resources; support communication and training for process changes.
Collaborate with business owners to develop and monitor risk mitigation efforts, ensuring issues are tracked, reported, and resolved on a timely basis.
Communicate with data owners to understand needs and evaluate business solutions.
Work closely with key business personnel across divisions, including domestic and global teams.
Demonstrate ownership and accountability for continuous improvement.
Create informative, well-organized presentations and communicate sensitive topics tactfully.
Apply knowledge of emerging privacy and security laws and best practices to solve business problems.
Lead the development and implementation of cybersecurity policy, standards, and procedures aligned to the organization’s framework, best practices, and objectives.
Work with IT and security teams to help enforce cybersecurity policies and procedures.
Practice creative thinking beyond existing company practices and mindsets.
Facilitate effective team interaction and recognize each team member’s contributions.
Seek and participate in development opportunities beyond required training.
Complete special projects as requested.

Required Qualifications

Bachelor’s Degree (or foreign equivalent). In lieu of a degree, at least 12 years of experience in the field of Information Technology or Business, or a combination of education and experience in IT or Business.
2+ years in IT and/or Business with experience assessing and evaluating business risk.
Leadership, problem solving, critical thinking, decision-making, organizational skills, strong oral and written communication, and the ability to work independently.
Intermediate knowledge of Microsoft Office tools.
Experience working on collaborative teams and motivating others in a team-oriented environment across cultures.
Business knowledge including a working knowledge of SW structure, business processes, operations, and goals (preferred).
Ability to score, calculate, and quantify risk.
Experience with internal control frameworks for IT, information security, IT governance frameworks, and conducting and analyzing risk assessments.
Excellent writing and communication skills, including translating technical concepts into clear, concise policy and standards.
Must be legally authorized to work in the United States without company sponsorship.
Must be at least 18 years of age.

Technologies and Frameworks

Microsoft Office
CISSP, CISA, CRISC
FAIR
NIST Cyber Security Framework (CSF)
NIST Privacy Framework (PF)
AI Framework

Preferred

Experience with IT GRC or an equivalent risk or security management system.
Preferred certifications: CISSP, CISA, CRISC, FAIR, or related certifications.
Knowledge of NIST frameworks including CSF and PF, plus the AI Framework.

Compensation: USD 82,208 - 104,290 per year.

Minimum Experience: 2 years.

View full job page →

1mo ago

Cybersecurity Architect

Agilent Technologies Inc Colorado Springs, CO

Colorado Springs, CO

1mo ago Closed

$139k - $218k/yr Full time Cloud Platforms Data Security Information Security

This position is no longer accepting applications (closed Oct 22, 2026).

Job Description

Agilent Technologies Inc is seeking a Cybersecurity Architect to define and drive the enterprise cybersecurity strategy, roadmap, and target-state security architectures. The role advises leadership on cybersecurity trends and regulatory requirements while guiding secure AI adoption and governance, and embedding security into major modernization initiatives.

Key Responsibilities

Develop, maintain, and communicate Agilent’s multi-year cybersecurity strategy and enterprise security roadmap.
Evaluate emerging cybersecurity threats, industry trends, technology innovations, and future business requirements to identify security opportunities and risks.
Define target-state security architectures, reference architectures, and security standards for enterprise, cloud, data, AI, and digital transformation initiatives.
Partner with enterprise architecture, infrastructure, cloud, application development, data, and product teams to ensure security is built into strategic technology decisions.
Act as a security advisor for major enterprise initiatives, acquisitions, business transformations, and technology modernization efforts.
Lead development of Agilent’s secure AI strategy, including governance models, architecture standards, control frameworks, and risk management approaches.
Assess the security implications of AI technologies, including large language models, autonomous agents, machine learning platforms, and other emerging AI-driven capabilities.
Collaborate with IT and Information Security leadership to prioritize cybersecurity investments and roadmap initiatives based on risk and business objectives.
Drive alignment of security architecture decisions with regulatory, compliance, privacy, and business requirements.
Monitor emerging global cybersecurity regulations, standards, and industry frameworks impacting Agilent’s operations, products, and AI initiatives.
Provide strategic guidance across identity and access management, data protection, cloud security, application security, infrastructure security, and security monitoring capabilities.
Create executive presentations, technology strategies, and cybersecurity recommendations for senior leadership and governance forums.
Work with security engineering, security operations, risk management, compliance, privacy, and product security teams to support cohesive security architecture and long-term capability planning.

Required Qualifications

Bachelor’s degree in computer science, Cybersecurity, Information Technology, Engineering, or a related field.
10+ years of experience in cybersecurity, security architecture, enterprise architecture, information security, or related disciplines.
Demonstrated experience developing enterprise security strategies, roadmaps, reference architectures, and security transformation programs.
Strong understanding of key security architecture principles and core security fundamentals, including Operational Technology.
Strong knowledge of AI technologies, AI governance frameworks, AI security controls, and emerging risks associated with generative AI and machine learning systems.
Experience interpreting and applying cybersecurity regulations, industry standards, and compliance requirements.
Proven ability to work effectively across technical, business, and executive leadership teams.
Strong communication, influencing, and stakeholder management skills, including the ability to translate complex technical topics into actionable business recommendations.

Preferred Qualifications

Experience leading enterprise-wide security transformation or modernization programs.
Experience with cloud platforms such as Azure, AWS, and Google Cloud Platform.
Knowledge of NIST Cybersecurity Framework (CSF), NIST AI Risk Management Framework (AI RMF), ISO 27001, CIS Controls, Zero Trust Architecture, and related industry standards.
Experience in regulated industries such as life sciences, healthcare, medical devices, or manufacturing.
Experience in the healthcare and/or manufacturing sector.
Professional certifications such as CISSP, CISM, CCSP, CRISC, GIAC, or equivalent.

Relevant Technologies and Frameworks

Azure, AWS, Google Cloud Platform
NIST Cybersecurity Framework (CSF)
NIST AI Risk Management Framework (AI RMF)
ISO 27001
CIS Controls
Zero Trust Architecture
CISSP, CISM, CCSP, CRISC, GIAC

Location, Schedule, and Travel

Location: Colorado Springs, CO (onsite)
Schedule: Full time; day shift
Travel required: 10% of the time
Duration: No end date
Job function: IT

Compensation and Benefits

Salary range: USD 139,440 to 217,875 per yearly
Pay is inclusive of eligibility for bonus, stock, and benefits
Individual pay within the range is determined by work location and additional factors, including job-related skills, experience, and relevant education or training
Full-time equivalent pay range: $139,440.00 - $217,875.00/yr plus eligibility for bonus, stock and benefits

Application Details

Applications accepted until at least: September 28, 2026 or until the job is no longer posted
Pay and benefit information by country: https://careers.agilent.com/locations

View full job page →

Nist Frameworks Cybersecurity Jobs

Senior Cybersecurity GRC Analyst

Cybersecurity Analyst - Risk and Controls

Cybersecurity Architect

Get Nist Frameworks Cybersecurity Jobs alerts