InfoSec GRC Analyst

InfoSec GRC Analyst

POSTED: September 3, 2025 LOCATION: Plano Texas POSITION ID: #248948 EMPLOYMENT TYPE: Direct Hire Salary: $120000 - $125000

Location: Plano, Texas

Type: Direct Hire

Job #248948

Salary: $120,000

Senior InfoSec GRC Analyst
Location: Plano, TX (Preferred) or Irvine, CA
Schedule: Hybrid (2 days onsite per week, Tuesday–Friday)
Compensation: $100,000 – $125,000 per year (Direct Hire)

Company Overview
At The Intersect Group, we connect top talent with organizations that are driving innovation and operational excellence.

Our client is a leading financial services organization committed to delivering secure, customer-centric solutions.

With a strong emphasis on compliance, governance, and continuous improvement, they foster a collaborative environment where professionals can make a meaningful impact.

Role Summary
We are seeking a mid-level Senior InfoSec GRC Analyst to lead the governance of cybersecurity policies and standards.

This role plays a critical part in aligning regulatory frameworks with business objectives, ensuring the organization maintains a strong security posture and meets compliance obligations.

You will work closely with cross-functional teams to manage policy lifecycle activities, conduct gap analyses, and support risk management initiatives.

Your expertise will help guide the development and implementation of governance frameworks, while serving as a key resource for internal audits and regulatory assessments.

Key Responsibilities

Lead the development, implementation, and maintenance of cybersecurity and IT policies and standards.

Ensure alignment with regulatory frameworks such as NIST, FFIEC, GLBA, NYDFS, SOX, and PCI-DSS.

Collaborate with IT, legal, compliance, and product teams to align policies with business needs.

Conduct gap analyses and risk assessments to identify deficiencies and recommend solutions.

Support internal and external audits, ensuring findings are tracked and resolved.

Maintain accurate documentation of policy reviews, training activities, and incident responses.

Benchmark policies against industry standards and implement governance frameworks.

Present findings and recommendations to stakeholders across the organization.

Key Requirements

Bachelor’s degree in Information Security, Computer Science, IT, or a related field (preferred).

5–8 years of experience in Cybersecurity GRC, policy development, or risk management.

Hands-on experience with GRC tools such as Archer, ServiceNow, or OneTrust.

Proficiency in Excel and Power BI for data analysis and reporting.

Strong understanding of NIST and other regulatory frameworks.

Familiarity with risk management concepts, control frameworks, and compliance auditing.

Ability to communicate effectively with technical and non-technical stakeholders.

Relevant certifications such as CISM or CISA are highly desirable.