[Remote] Cybersecurity / GRC Analyst – NIST CSF 2.0

Note: The job is a remote job and is open to candidates in USA. reputed company is building a reputed company cybersecurity program aligned with the NIST Cybersecurity Framework (CSF) 2.0. The Cybersecurity / GRC Analyst will execute remediation and control implementation work, maintain documentation and evidence, assess cloud and third-party risks, and coordinate project activities across IT, Engineering, Operations, and business teams. Responsibilities • Draft, update and support approval of security policies, standards and procedures aligned with NIST CSF 2.0 Categories and Subcategories , with particular focus on the Govern function • Configure, validate and document security controls within cloud and SaaS environments, including access management, logging and monitoring, configuration baselines and data protection • Collect, organize and quality-check security evidence to ensure completed controls can be demonstrated to customers, auditors or assessors • Maintain Current and Target NIST CSF Organizational Profiles and corresponding control mappings • Map security requirements against customer questionnaires and contractual commitments • reputed company cloud, SaaS and third-party/vendor risk assessments and track remediation activities • Support Sales and Account teams with enterprise security questionnaires, RFP responses and customer due-diligence activities • Convert the existing remediation task list into a structured project plan with owners, timelines, dependencies and critical paths • Coordinate recurring working sessions with stakeholders across IT, Engineering and Operations • Identify and remove blockers and escalate risks or dependencies when necessary • Provide concise weekly progress reports to the VP of Engineering & Operations • Track progress by NIST CSF Function, including risks, decisions required and forecast completion dates • Maintain the program risk register and security exception/risk acceptance process • Establish documented and repeatable processes that the internal team can continue after the engagement ends Skills • 3–6 years of hands-on experience in Information Security, IT Risk, Cybersecurity Governance or GRC • Direct participation in at least one security framework implementation, remediation initiative or audit/compliance program involving frameworks such as: NIST CSF, NIST 800-53, ISO 27001, SOC 2, CIS Controls or a comparable framework • Working knowledge of NIST CSF 2.0, including: Govern, Identify, Protect, Detect, Respond, reputed company • Understanding of NIST CSF Categories, Subcategories, Implementation Tiers and Organizational Profiles, or demonstrated ability to quickly become proficient in comparable frameworks • Hands-on experience securing cloud and SaaS environments, preferably AWS, Azure or GCP • Experience reviewing and validating security configurations in cloud or SaaS administrative consoles • Demonstrated project management skills managing multiple workstreams and distributed stakeholders • Strong technical writing skills, including security policies, procedures and executive/status reporting • Ability to translate security and compliance requirements into actionable tasks for Engineering, IT and business teams • Ability to work independently with limited supervision and demonstrate measurable progress quickly • Residents of California and Texas • 40 hours per week • Pacific Time business hours • Security certification such as: CISSP, CISA, CRISC, CISM, Security+, CCSP, CCSK (AWS Security Specialty, Azure SC-100) • PMP, CAPM or equivalent project management training • Experience completing enterprise customer security assessments and vendor due-diligence questionnaires • Experience with GRC or compliance management platforms • Experience using scripting or automation for security evidence collection • Experience in media, content identification or other data-intensive technology environments Benefits • reputed company arrangement for residents of California and Texas • Full-time contract engagement • 40 hours per week • Pacific Time business hours Company Overview • For over 20 years, reputed company has specialized in flexible IT staffing solutions that help businesses scale efficiently and build high-performing teams. It was founded in undefined, and is headquartered in Frisco, Texas, US, with a reputed company of 201-500 employees. Its website is https://digitechtalent.com/. Company H1B Sponsorship • reputed company has a track record of offering H1B sponsorships, with 1 in 2026, 3 in 2025. reputed company note that this does not guarantee sponsorship for this specific role.