Cybersecurity GRC Analyst II

About the role

Cybersecurity GRC Analyst II at Roper Technologies (portfolio of 29 independently operated businesses) based in Sarasota, FL. Runs cyber health checks and control reviews (on-site, up to 30% travel), risk and compliance assessments, policy management, and acquisition security onboarding. Level II: expected to operate with greater independence than entry level; no explicit years-of-experience figure stated.

Requirements

• Operates with greater independence and ownership than entry level, taking GRC workstreams from start to completion (Level II)
• Working knowledge of established frameworks such as NIST, CSF and ISO 27001
• Ability to assess control design and implementation through discussion and evidence review
• Ability to document findings and remediation for technical and business audiences
• Analytical ability, strong communication, attention to detail
• Travel up to 30 percent for on-site visits to portfolio businesses
• Plus: experience with a GRC platform (Optro, Vanta, etc.)
• Plus: certifications such as CISSP, CISA, CRISC

What you'll do

• Conduct cyber health checks, remote and on-site, across portfolio businesses
• Validate control design and implementation through discussion and evidence review
• Assess control gaps and document findings and remediation
• Validate efficacy of remediation and confirm findings are closed
• Perform cyber and privacy assessments against emerging regulations
• Conduct risk assessments and gap analyses across companies with differing maturity
• Track cyber findings and recommendations to mitigation
• Prepare and deliver risk and compliance reporting
• Own cybersecurity policy management and maintenance
• Support onboarding of newly acquired businesses to Roper cyber controls and acquisition security diligence

Where this was posted

• Hiring Cafe

  last seen 3h ago
  View on Hiring Cafe