1mo
Save
Mark Applied
Hide
GRC Analyst
Irvine, California, United States
$110k-$135k/yr HybridFull Time
3+ YOE3+ years in GRC/security compliance or IT audit; hands-on SOC 2/ISO 27001/HIPAA work; cloud (AWS/Azure/GCP) familiarity; vendor assessments; Jira; strong written communication; authorized to access CUI (US citizen or permanent resident).
SOC 2, CMMC, ISO 27001, HIPAA, NIST 800-171, DFARS 252.204-7012, FedRAMP, NIST AI RMF, System Security Plan (SSP), C3PAO, Drata, Vanta, Hyperproof, Secureframe, Jira, AWS, Azure, GCP, EASE
1w
Save
Mark Applied
Hide
Sr Information Security GRC Analyst
Irvine, California, United States
$130k-$170k/yr OnsiteFull Time
7+ YOE7+ years GRC or related experience, experience with HITRUST/ISO 27001/SOC 2/NIST, third-party risk assessments, strong documentation and stakeholder skills, bachelor's degree in related field required.
HITRUST, ISO 27001, SOC 2, NIST CSF, PCI DSS, UK Cyber Essentials, NIS2, HIPAA, FDA
1w
Save
Mark Applied
Hide
GRC Risk Analyst III
Los Angeles, California, United States
$104k/yr OnsiteFull Time
5+ YOE5+ years in security risk management, bachelor’s in info security/CS/engineering, strong knowledge of security/privacy standards, experience with risk frameworks and assessments, strong communication and analytical skills.
MITRE ATT&CK, STRIDE, OCTAVE, ISO 27k, NIST, CCM, PCI DSS, GDPR, CCPA
2mo
Save
Mark Applied
Hide
Risk Ops Analyst III
Irvine, California, United States
$120k-$150k/yr OnsiteFull Time
6+ YOE6+ years in Technology Risk or IT Risk Management; experience with risk assessments, issue management, exception processes, and GRC platforms. Bachelor's in a related field. Strong communication and reporting skills.
GRC platforms, NIST CSF, ISO 27001, CIS
1w
Save
Mark Applied
Hide
Sr. Risk Operation Analyst - Integrated Risk Management "IRM"
Irvine, California, United States
$120k-$170k/yr OnsiteFull Time
7+ YOE7+ years technology/cyber/GRC risk experience, bachelor\u0002s degree in related field, strong knowledge of control frameworks, GRC platform familiarity, analytics and dashboarding, excellent stakeholder and communication skills.
NIST CSF 2.0, ISO 27001, CIS, GRC platforms
1d
Save
Mark Applied
Hide
Senior Enterprise Risk Analyst
Lakewood, California, United States
$102k-$174k/yr OnsiteFull Time
5+ YOEBachelor's degree in a related field, 5+ years banking or risk experience, strong analytics, ERM/GRC knowledge, advanced Excel and reporting skills, and ability to prepare executive/board reports.
Microsoft Excel, Microsoft Word, Microsoft PowerPoint, Microsoft Visio, GRC
4w
Save
Mark Applied
Hide
Classified Cyber Assurance Analyst
Hawthorne, California, United States
$85k-$135k/yr OnsiteFull Time
1+ YOEBachelor's degree or 3+ years managing cyber assurance for classified systems; 1+ years cyber assurance; RMF A&A lifecycle experience; familiarity with Nessus, Splunk, Security Center, ServiceNow, eMASS, and GRC tools; active TS/SCI clearance and CI polygraph or ability to obtain.
RMF, Nessus, Splunk, Security Center, ServiceNow (SNOW), eMASS, GRC, NRO A&A, JSIG A&A
1mo
Save
Mark Applied
Hide
Senior Technical PCI Analyst (Hybrid - Seattle)
Seattle or Los Angeles or San Francisco
$166k-$258k/yr HybridFull Time
6+ YOE6+ years hands-on PCI DSS experience (3+ years owning a PCI program), deep PCI DSS v4.0 knowledge, cloud (AWS/Azure/GCP) scoping experience, hands-on control testing and QSA coordination, GRC platform experience, bachelor’s degree or equivalent.
PCI DSS v4.0, ServiceNow, Archer, Drata, Vanta, AWS, Azure, GCP, GRC platform
1mo
Save
Mark Applied
Hide
SOX Senior Analyst
Westlake Village or Carrollton
$65k-$100k/yr OnsiteFull Time
3+ YOEBachelor's degree or equivalent, 3+ years internal audit/SOX/public accounting experience, SOX 404 exposure, familiarity with COSO frameworks, exposure to financial and IT controls, GRC tool experience; CPA/CIA/CISA preferred.
Governance Risk and Compliance (GRC), COSO integrated frameworks
2w
Save
Mark Applied
Hide
Senior Analyst, IT Internal Controls & SOX Compliance
San Francisco or Salt Lake City or Phoenix or Los Angeles or Chicago or Boston or Austin or New York City or Miami or Tampa or Atlanta or Columbus or Boise or San Diego or Minneapolis or Houston or Raleigh or Nashville or Kansas City or Charlotte or Portland or Philadelphia or Dallas or Washington D.C. or Seattle
$113k-$148k/yr RemoteFull Time
4+ YOE4+ years Big 4 IT audit/controls experience, Bachelor's in related field, CPA/CISA/CIA/CISSP required; strong SOX/ITGC knowledge, cloud/SaaS/SDLC/IAM experience, ERP/GRC familiarity, and stakeholder communication skills.
Slack, Apple MacOS, Google Workspace, ERP, GRC, AI
1mo
Save
Mark Applied
Hide
Information Technology Security Analyst- Hybrid
Gardena, California, United States
$89k-$125k/yr HybridFull Time
5+ YOE5+ years in cybersecurity, information security, GRC, or technology risk; Bachelor's degree in related field; experience in regulated financial services preferred.
NIST CSF, NIST 800-53, CIS Controls, ISO 27001, CIS Benchmarks, Vulnerability management, SOC reports, SIEM, Endpoint protection, DLP, Email security, Web filtering
1mo
Save
Mark Applied
Hide
VP, Lead Security Risk Analyst
Los Angeles or Santa Ana
$145k-$170k/yr OnsiteFull Time
7+ YOEBachelor’s degree; 7+ years GRC/cybersecurity experience with cloud/security architecture; experience conducting enterprise risk assessments and translating requirements into architectural controls; strong communication and leadership; related certifications preferred.
PCI-DSS, GDPR, CCPA, GLBA, NIST, ISO 27001, OWASP, CIS, AI/ML, SmartStreet
2mo
Save
Mark Applied
Hide
Enterprise Risk Analyst
Denver or Long Beach or Washington DC
$115k-$165k/yr OnsiteFull Time
5+ YOEEnterprise risk and third-party risk focus; knowledge of NIST RMF, CMMC; experience with risk quantification methods like FAIR/OCTAVE; collaboration across engineering, security, legal, and operations.
NIST RMF, CMMC, OCTAVE, FAIR, Jira, Confluence, MS Project, GRC platforms
2w
Save
Mark Applied
Hide
Cyber and Technology Risk Analyst - Lead Consultant
Illinois or San Francisco or Los Angeles or Indiana
$91k-$154k/yr HybridFull Time
4+ YOEMinimum 4 years in cyber/technology risk management; expertise with MITRE ATT&CK, threat modeling, cloud and infrastructure, risk assessments, strong analytical and communication skills; relevant security certs preferred.
MITRE ATT&CK Framework, GRC Platform, Identity Access Management (IAM)