Cybersecurity Controls Testing Analyst (NIST CSF)

We are hiring a Cybersecurity GRC Analyst / IT Audit Analyst with strong experience in Security Control Testing, Cyber Risk, and compliance frameworks like NIST CSF and ISO 27001.

Key Responsibilities

• Perform cybersecurity control testing aligned with NIST CSF
• Conduct ITGC testing and risk assessments
• Evaluate controls across IAM, SIEM, Vulnerability Management, Endpoint & Network Security
• Review logs, system configurations, and audit evidence
• Identify control gaps and document audit findings
• Track remediation and validate closure

Required Skills

• Experience in Cybersecurity / IT Audit / GRC
• Knowledge of NIST CSF, ISO 27001, SOC2
• Hands‑on experience in control testing and risk assessment
• Exposure to IAM, SIEM, vulnerability management
• Experience with GRC tools like ServiceNow, AuditBoard

Preferred

• Certifications like CISA, CISSP, CISM, CRISC