Cybersecurity (GRC) Analyst - W2 ONLY

Role: Cybersecurity Analyst

W2 Contract: 6 months (Potential for Extension)

Location: 100% Remote

Pay Rate: $51/hour on W2 - All-inclusive

Important Note: This is a GRC-focused role, not a technical cybersecurity operations role candidates should be comfortable with policy, controls, and risk assessment work rather than hands-on technical security tasks.

Overview

Client is seeking a detail-oriented Cybersecurity Analyst to join the Cybersecurity Governance team for a leading healthcare organization. In this role, you will execute Governance, Risk, and Compliance (GRC) functions, evaluating technical and operational risks, ensuring adherence to regulatory frameworks, and coordinating compliance assessments across the enterprise.

Key Responsibilities

Perform risk assessments covering third-party vendors, policy exceptions, data sharing requests, and travel risks.

Conduct compliance assessments against established industry frameworks and regulations, including HIPAA and NIST.

Coordinate evidence collection for internal, external, and SOC 2 audits.

Respond to incoming customer questionnaires regarding the organization's security and control environment.

Utilize ServiceNow to track incoming governance requests and manage findings within the enterprise risk register.

Assist with Identity and Access Management (IAM) governance and controls reviews.

Required Qualifications

Minimum 3 years of cybersecurity experience focused on Governance, Risk, and Compliance (GRC) or IT Audit.

Must possess at least one recognized cybersecurity or audit certification (e.g., CISA, CISSP, CRISC).

Core understanding of security controls, policies, and risk management principles.

Excellent verbal and written communication skills to effectively engage across business units and external auditors.

Proficiency with basic enterprise productivity tools (e.g., Microsoft Office Suite).

Preferred Qualifications

Previous experience working within the healthcare or health insurance sector.

Familiarity with ServiceNow ticketing and basic workflow processes.

Hands-on experience mapping controls to NIST and HIPAA frameworks.