Cyber Security Analyst

Job Title: Cyber Security GRC Analyst

Company: Clinisol Tech Inc.

Experience: 3-4 years

Compensation: $80,000 – $90,000 per year (Negotiable)

Work Authorization

At this time, we are only able to consider candidates who are authorized to work in the United States without sponsorship.

Job Summary

Clinisol Tech Inc. is seeking a Cyber Security GRC Analyst

to support Governance, Risk, and Compliance (GRC) initiatives. In this role, you will help manage security frameworks, support audit readiness, conduct risk assessments, and ensure compliance with industry standards to strengthen the organization's overall security and regulatory posture.

Key Responsibilities

Support control testing and evidence collection for NIST, ISO 27001, and SOC 2 requirements.

Experience with GRC platforms such as ServiceNow GRC/IRM, RSA Archer, or OneTrust.

Conduct compliance gap assessments and track remediation activities.

Develop and maintain security policies, standards, and compliance documentation.

Perform third-party and vendor risk assessments.

Collaborate with IT, Security, and business teams during audit and compliance activities.

Prepare audit-ready documentation, reports, and compliance evidence.

Qualifications

Bachelor's degree in Cyber Security, Information Technology, Information Systems, or a related field.

4+ years of experience in IT Audit, GRC, Compliance, or Risk Management.

Working knowledge of NIST CSF / NIST 800-53, ISO 27001, SOC 2, and security control frameworks.

Experience supporting audits, compliance initiatives, and policy management.

Strong organizational, analytical, communication, and problem-solving skills.

Preferred Skills

CISA certification preferred.

NIST or ISO 27001 training/certifications.

Experience with SOC 2 compliance and vendor risk management.

Certifications such as CRISC, CGRC, or ISO 27001 Lead Implementer/Lead Auditor are a plus.

About Clinisol Tech Inc.

Clinisol Tech Inc. is a technology-driven organization focused on delivering innovative solutions across cybersecurity, healthcare, and enterprise domains. We are committed to protecting digital assets, strengthening security resilience, and enabling organizations to operate securely through advanced technologies, skilled professionals, and collaborative partnerships.