Cybersecurity GRC Analyst

- Coordinate initiatives to ensure alignment with NIST CSF 2.0 frameworks - Conduct and assist with cyber risk assessments and audits across all of our environments - Evaluate, monitor, and manage cybersecurity risks associated with third-party vendors and service providers - Aid in developing, maintaining, and documenting policies and controls that comply with standards and insurance regulations, including NAIC, Federal/State requirements, NIST or ISO, AICPA SOC2, and HiTrust - Assist in the completion and review of third-party risk questionnaires and support vendor due diligence activities under the supervision of senior team members - Keep abreast of regulatory and industry changes; advise leadership on compliance implications - Collaborate on incident response planning, including NIST alignment, remediation, and reporting - Work with internal teams to ensure secure data access and manage third-party/vendor risks - Organize and monitor security awareness training for staff - Lead audit readiness initiatives and prepare compliance reports for executives and regulators - Support the evaluation and integration of security requirements for new technologies, including AI and data lake house - Promote and reinforce continuous security and compliance awareness throughout our organization