Cybersecurity GRC Tool Analyst Job at Hewlett Packard Enterprise

Senior GRC Analyst

We are seeking an experienced Senior Governance, Risk, and Compliance (GRC) Anal...

Location

United States , Chicago

Salary:

90000.00 - 130000.00 USD / Year

Blume Global

Expiration Date

Until further notice

Requirements

5+ years of hands-on experience in GRC, preferably with a focus on acquisition integration
Strong knowledge of regulatory compliance requirements, risk management frameworks, including ISO 27001, NIST
Experience with SOC1/2, GDPR, and privacy frameworks
Proficiency in information security tools, techniques, and controls
Experience with metrics and KPIs to measure and track information security risk
Ability to develop policies, standards, and guidelines
ISO27001:2022 Lead Implementer and lead auditor certifications are a must
CISA, CISM, CISSP, or CRISC certifications are desirable
Experience with GRC tools, such as Vanta, Archer, ServiceNow Risk modules is highly desirable
Exposure to CMMC/FedRAMP is highly desirable

Job Responsibility

Acquisition Assessment: Collaborate with cross-functional teams to assess the GRC landscape of newly acquired companies, identifying gaps and alignment opportunities
Integration Planning: Develop comprehensive integration plans tailored to each acquisition, ensuring alignment with the company's overarching GRC strategy
Risk Management: Evaluate and mitigate risks associated with integration processes, working closely with risk management teams
Policy and Procedure Harmonization: Bridge gaps between existing practices and those of acquired entities, harmonizing policies, procedures, and controls
Communication and Stakeholder Management: Effectively communicate integration plans and progress, fostering strong relationships with key stakeholders
Reporting and Documentation: Maintain accurate documentation of integration activities and generate insightful reports for senior management
Continuous Improvement: Identify areas for improvement and drive enhancements to the integration process
Customer Security Questionnaire Support: Collaborate with various teams to ensure accurate and comprehensive responses to customer security questionnaires

Fulltime

Senior GRC Analyst

We are seeking an experienced Senior Governance, Risk, and Compliance (GRC) Anal...

Location

United States , Chapel Hill

Salary:

Not provided

Blume Global

Expiration Date

Until further notice

Requirements

5+ years of hands-on experience in GRC, preferably with a focus on acquisition integration
Strong knowledge of regulatory compliance requirements, risk management frameworks, including ISO 27001, NIST
Experience with SOC1/2, GDPR, and privacy frameworks
Proficiency in information security tools, techniques, and controls
Experience with metrics and KPIs to measure and track information security risk
Ability to develop policies, standards, and guidelines
ISO27001:2022 Lead Implementer, and lead auditor certifications are a must
CISA, CISM, CISSP, or CRISC certifications are desirable
Experience with GRC tools, such as Vanta, Archer, ServiceNow Risk modules is highly desirable
Exposure to CMMC/FedRAMP is highly desirable

Job Responsibility

Acquisition Assessment: Collaborate with cross-functional teams to assess the GRC landscape of newly acquired companies, identifying gaps and alignment opportunities
Integration Planning: Develop comprehensive integration plans tailored to each acquisition, ensuring alignment with the company's overarching GRC strategy
Risk Management: Evaluate and mitigate risks associated with integration processes, working closely with risk management teams
Policy and Procedure Harmonization: Bridge gaps between existing practices and those of acquired entities, harmonizing policies, procedures, and controls
Communication and Stakeholder Management: Effectively communicate integration plans and progress, fostering strong relationships with key stakeholders
Reporting and Documentation: Maintain accurate documentation of integration activities and generate insightful reports for senior management
Continuous Improvement: Identify areas for improvement and drive enhancements to the integration process
Customer Security Questionnaire Support: Collaborate with various teams to ensure accurate and comprehensive responses to customer security questionnaires

Cyber Manager's Control Assessment (MCA) Lead Analyst

This role will report to the Cybersecurity MCA Group Manager, responsible for pr...

Location

Hungary , Budapest

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

Have at least 8+ years of relevant experience
Experience in Manager’s Control Assessment (MCA), Operational Risk, Information Security, Cybersecurity, Risk Management, and/or Governance, Risk and Control (GRC)
Risk Management, Cybersecurity, and/or Project Management certifications are a plus (e.g. CRISC, CISA, CISM, CISSP, PMP)
Proven experience in implementing sustainable solutions and improving processes
Bring creative approaches to help us drive value for clients
Ability to influence decisions with senior leadership and business partners when confronted with differing opinions on information security risks
Proficiency with Microsoft Office, advanced Excel skills (e.g. macros, pivots, complex formulas)
Knowledge of data visualization/analytics business applications such as Tableau, QlikView, and Microsoft Power BI
Familiarity with Machine Learning and Artificial Intelligence (AI) is a plus
Fluent in English (ability to read, write, and speak)

Job Responsibility

Manage the planning, coordination, and execution of MCA Transformation program for CISO
Drive MCA best practices, transformation, and execution consistency across business/functions
Lead efforts in Global Process MCA Profiles (GPMPs) and Continuous Risk Management (CRM) for CISO
Gain expert-level knowledge of MCA Standard, Procedure, and tools to support future-state MCA
Support CISO Business Processes, Control Owners, and Global Assessment Unit (GAU) Owners in their responsibilities related to MCA execution
Identify and document key controls necessary for mitigation of cybersecurity risk
Be a hands-on Subject Matter Expert (SME) with the ability to drive problem solving and root cause analyses, simplify complex messages and summarize key points
Partner with CISO’s Enterprise Architecture Methodology (EAM) Lead team by which taxonomies and processes interlink with each other, establishing a multifaceted matrix to inform decision-making and simplification
Foster constructive dialogue and facilitate open discussion, sharing of knowledge and experience with customers and stakeholders
Actively manage relationships with CISO business partners and risk management teams to achieve sustained success

What we offer

Cafeteria Program
Home Office Allowance (for colleagues working in hybrid work models)
Paid Parental Leave Program (maternity and paternity leave)
Private Medical Care Program and onsite medical rooms at our offices
Pension Plan Contribution to voluntary pension fund
Group Life Insurance
Employee Assistance Program
Access to a wide variety of learning and development programs, online course libraries and upskilling platforms, such as Udemy and Degreed
Flexible work arrangements to support you in managing work - life balance
Career progression opportunities across geographies and business lines

Fulltime

Product Security Engineer - Secure SDLC Analyst

HPE Aruba Networking is looking for a person excited to work at the intersection...

Location

United States , San Juan

Salary:

Not provided

Hewlett Packard Enterprise

Expiration Date

Until further notice

Requirements

BS in Information Security, Computer Science, or related technical field
A background in software security, either academic or work experience, including reverse engineering, vulnerability classes such as buffer overflows and their prevention, web application security, and/or cloud security
Programming knowledge of at least one programming language with the ability to look at source code and figure out what it’s doing
Familiarity with the purpose of tools such as IDEs, compilers, source code revision control systems, ASPM, SCA and code scanners
Minimum 3 years of experience working directly in software engineering or in an adjacent field with exposure to the software engineering environment
Experience conducting risk assessments, threat modeling, and/or compliance assessments
Experience supporting the integration of security practices through the software development lifecycle

Job Responsibility

Assist in the execution of product compliance assessments against various frameworks (e.g. NIST SSDF, NIST SP 800-218, SP 800-53, CIS Benchmarks)
Assist in the development and/or maintenance of GRC and SDLC tooling implementations, including scripting and automation
Operate as a representative of HPE Aruba in working groups, with government representatives, and with auditors
Provide consulting, information, and advice to product teams around implementing and improving the maturity of our SDLC
Document known issues and provide information to product teams in a manner which allows for easy interpretation and corrective actions to be performed
Monitor worldwide government standards and communicate to management and product teams when changes are made that may impact an existing control or introduce new requirements

What we offer

Health & Wellbeing
Personal & Professional Development
Unconditional Inclusion

Fulltime

Security Analyst

As a Security Analyst, you will be a key player in our IT security team, focusin...

Location

United States , Tallahassee

Salary:

Not provided

Robert Half

Expiration Date

Until further notice

Requirements

Lead the technical execution of security-related projects, focusing on system hardening and network security
Engage in effective communication and collaboration with various teams to meet specific security standards
Utilize your expertise in firewalls, Intrusion Detection Systems/Intrusion Prevention Systems (IDS/IPS), and encryption to ensure secure configurations
Conduct comprehensive vulnerability assessments and devise relevant remediation strategies
Manage security tools and provide support for incident response, ensuring the seamless integration of security platforms
Ensure strict adherence to Criminal Justice Information Services (CJIS) and State of Florida regulations
Work closely with Governance, Risk, and Compliance (GRC) teams to address audit gaps
Document and provide training on cybersecurity solutions and processes with a focus on CJIS and State regulations
Reengineer security processes for improved efficiency and compliance
Stay informed about emerging threats and technologies, providing support for cybersecurity issues

Job Responsibility

Lead the technical execution of security-related projects, focusing on system hardening and network security
Engage in effective communication and collaboration with various teams to meet specific security standards
Utilize your expertise in firewalls, Intrusion Detection Systems/Intrusion Prevention Systems (IDS/IPS), and encryption to ensure secure configurations
Conduct comprehensive vulnerability assessments and devise relevant remediation strategies
Manage security tools and provide support for incident response, ensuring the seamless integration of security platforms
Ensure strict adherence to Criminal Justice Information Services (CJIS) and State of Florida regulations
Work closely with Governance, Risk, and Compliance (GRC) teams to address audit gaps
Document and provide training on cybersecurity solutions and processes with a focus on CJIS and State regulations
Reengineer security processes for improved efficiency and compliance
Stay informed about emerging threats and technologies, providing support for cybersecurity issues

What we offer

medical, vision, dental, and life and disability insurance
eligible to enroll in our company 401(k) plan

Fulltime

Compliance Analyst

insightsoftware is seeking a detail-oriented and proactive Compliance Analyst to...

Location

United States , Remote

Salary:

Not provided

insightsoftware

Expiration Date

Until further notice

Requirements

Bachelor's degree in information security, Cybersecurity, Computer Science, Risk Management, Legal Studies, Business Administration, or related field
Minimum 3+ years of experience in compliance program management, risk management, or information security roles, preferably in regulated industries or technology companies
Demonstrated experience responding to third-party risk assessments, security audits, customer security questionnaires, RFPs, and compliance due diligence requests
Working knowledge of regulatory frameworks and standards (e.g., ISO 27001, SOC 2 (Type II), NIST, FedRAMP, CMMC, PCI DSS, GDPR, CCPA), trade control regulations (EAR, ITAR), anti-bribery/corruption laws (FCPA, UK Bribery Act), and data privacy principles
A strong knowledge of at least one regulatory framework governing matters pertaining to data privacy, cybersecurity, trade compliance, or third-party risk management
Experience with third-party screening tools and vendor risk management platforms
Familiarity with GRC or data protection management platforms (e.g., OneTrust, ServiceNowMetricStream)

Job Responsibility

Support the development, implementation, and maintenance of a global compliance program, including trade compliance, anti-bribery/corruption, anti-trust, and business ethics
Conduct secondary screening of third parties (vendors, partners, customers) , and assess potential matches against government watchlists of denied, debarred, sanctioned, or restricted parties to ensure compliance with applicable trade compliance, export control and sanctions regulations (e.g., U.S. Department of the Treasury Office of Foreign Assets Control ("OFAC"), U.S. Department of Commerce Bureau of Industry and Security ("BIS"), U.K. Office of Financial Sanctions Implementation ("OFSI"), European Union, and United Nations)
Assist with export classification determinations and licensing requirements for software products and services, including evaluation of Export Control Classification Numbers ("ECCNs")
Support the company's compliance with applicable data protection regulatory frameworks (e.g., GDPR, CCPA)
Support the Corporate Counsel, Data Privacy, AI, Cybersecurity with data protection initiatives and obligations including data mapping exercises, processing activity records, and privacy impact assessments, and coordinate responses to data subject access requests ("DSARs") and privacy-related inquiries
Support privacy management tools and platforms for consent management and privacy workflow automation
Partner with company counsel, InfoSec, and other stakeholders with compliance audits, data privacy questionnaires, and third-party risk assessment processes including vendor due diligence and ongoing monitoring
Support risk and control self-assessments ("RCSA"), audit management, and remediation tracking
Collaborate with stakeholders including the Chief Information Security Officer ("CISO") and the team to quantify, monitor, and report on security and compliance performance
Maintain GRC platforms (e.g., ServiceNow, Archer, MetricStream) to track compliance activities, risks, and controls

Senior GRC Analyst

We are seeking an experienced Senior Governance, Risk, and Compliance (GRC) Anal...

Location

United Kingdom , London

Salary:

Not provided

Blume Global

Expiration Date

Until further notice

Requirements

5+ years of hands-on experience in GRC, preferably with a focus on acquisition integration
Strong knowledge of regulatory compliance requirements, risk management frameworks, including ISO 27001, NIST
Experience with SOC1/2, GDPR, and privacy frameworks
Proficiency in information security tools, techniques, and controls
Experience with metrics and KPIs to measure and track information security risk
Ability to develop policies, standards, and guidelines
ISO27001:2022 Lead Implementer and lead auditor certifications are a must
CISA, CISM, CISSP, or CRISC certifications are desirable
Experience with GRC tools, such as Vanta, Archer, ServiceNow Risk modules is highly desirable
Strong foundation in core IT or Cybersecurity principles, ideally supported by hands-on experience in areas such as networking, system administration, or security operations

Job Responsibility

Acquisition Assessment: Collaborate with cross-functional teams to assess the GRC landscape of newly acquired companies, identifying gaps and alignment opportunities
Integration Planning: Develop comprehensive integration plans tailored to each acquisition, ensuring alignment with the company's overarching GRC strategy
Risk Management: Evaluate and mitigate risks associated with integration processes, working closely with risk management teams
Policy and Procedure Harmonization: Bridge gaps between existing practices and those of acquired entities, harmonizing policies, procedures, and controls
Communication and Stakeholder Management: Effectively communicate integration plans and progress, fostering strong relationships with key stakeholders
Reporting and Documentation: Maintain accurate documentation of integration activities and generate insightful reports for senior management
Continuous Improvement: Identify areas for improvement and drive enhancements to the integration process
Customer Security Questionnaire Support: Collaborate with various teams to ensure accurate and comprehensive responses to customer security questionnaires

Grc cybersecurity analyst

Seeking a GRC Cybersecurity Analyst. At WE ARE META, we focus on finding the per...

Location

Portugal , Lisbon

Salary:

Not provided

We Are Meta

Expiration Date

Until further notice

Requirements

Bachelor’s or Master’s degree in Information Security, IT Management, or related field
2–4 years of experience in cybersecurity governance, risk management, or audit
Experience in ISO 27001, NIS2, or similar frameworks
Knowledge of NIST and COBIT frameworks, PCI DSS, and GDPR awareness
Familiarity with risk management tools and data visualization (Excel, Power BI)
B2 proficiency in English and fluent Portuguese
Available to work in a hybrid model 2 to 3 times a week in Alfragide

What we offer

You’ll get a welcome kit
Opportunities for career progression
Live on the edge with our health insurance
Coverflex meal card
Other protocols and special discounts

Cybersecurity GRC Tool Analyst

Hewlett Packard Enterprise

Location:
Canada

Category:
IT - Administration

Contract Type:
Employment contract

Salary:

Job Description:

Job Responsibility:

Requirements:

Nice to have:

Additional Information:

Job Posted:
November 11, 2025

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Cybersecurity GRC Tool Analyst

Senior GRC Analyst

Senior GRC Analyst

Cyber Manager's Control Assessment (MCA) Lead Analyst

Product Security Engineer - Secure SDLC Analyst

Security Analyst

Compliance Analyst

Senior GRC Analyst

Grc cybersecurity analyst

Cybersecurity GRC Tool Analyst

Hewlett Packard Enterprise

Location:Canada

Category:IT - Administration

Contract Type:Employment contract

Salary:

Job Description:

Job Responsibility:

Requirements:

Nice to have:

Additional Information:

Job Posted:November 11, 2025

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Cybersecurity GRC Tool Analyst

Senior GRC Analyst

Senior GRC Analyst

Cyber Manager's Control Assessment (MCA) Lead Analyst

Product Security Engineer - Secure SDLC Analyst

Security Analyst

Compliance Analyst

Senior GRC Analyst

Grc cybersecurity analyst

Location:
Canada

Category:
IT - Administration

Contract Type:
Employment contract

Job Posted:
November 11, 2025