1w
Save
Mark Applied
Hide
Principal Technology Risk Analyst
Westlake or Merrimack or Smithfield
OnsiteFull Time
6+ YOEBachelor's or equivalent experience; 6+ years in cybersecurity/technology risk; strong AI governance, data privacy, and model governance knowledge; CISSP or CISA preferred; excellent written and verbal communication.
1mo
Save
Mark Applied
Hide
IT Risk Analyst
Plymouth, Massachusetts, United States
$73k-$90k/yr OnsiteFull Time
2+ YOEBachelor's preferred; 2+ years technology audit or IT risk assessment experience; familiarity with financial services/regulatory environments; ability to assess controls, test operating effectiveness, and document results; strong communication skills.
NIST, CIS, COBIT, ISO
1w
Save
Mark Applied
Hide
Principal/Senior IT Risk Analyst
Boston, Massachusetts, United States
$160k-$180k/yr OnsiteFull Time
10+ YOE10+ years in IT risk/audit/GRC, experience with RCSAs/KRIs, vendor risk/SOC reviews, strong writing and communication, knowledge of NIST/COSO/COBIT and US/global regulations; professional certs a plus.
Workiva, AuditBoard, ServiceNow, Drata, Vanta
1mo
Save
Mark Applied
Hide
Senior Cybersecurity Risk Analyst - USA Remote
Washington or Boston or Dallas or Chicago or Miami or Denver or Orange or Los Angeles or Las Vegas or Sacramento or Phoenix or San Diego or United States
$130k-$160k/yr RemoteFull Time
7+ YOE7+ years in third-party/vendor risk, enterprise risk, or vendor security; experience administering vendor questionnaires, reviewing SOC 2/ISO 27001 evidence, scoring at scale, reviewing cybersecurity contract provisions, and operating enterprise risk registers.
Shared Assessments SIG, NIST SP 800-161, ISO/IEC 27036, GDPR, HIPAA, PCI DSS, SOX, SOC 2, ISO 27001, NIST AI RMF, ISO/IEC 42001, OneTrust, ServiceNow IRM, RSA Archer
3w
Save
Mark Applied
Hide
Data, AI and Emerging Technology Risk Principal Analyst
Johnston or Iselin or Westwood or Phoenix
HybridFull Time
7+ YOE7+ years IT risk experience; deep expertise with CRI/NIST/COBIT/ITIL; experience with cloud, data platforms, analytics, and security tools; strong executive communication and mentoring skills.
CRI Profile, NIST Cybersecurity Framework, NIST 800-53, COBIT, ITIL, AWS RDS, OCI, Snowflake, Databricks, Redshift, Starburst, Hadoop, Spark, Kafka, Talend, Informatica, Tableau, Webfocus, Autosys, Airflow, Java, Tessell, MongoAtlas, Collibra, Grafana, Datadog, Qualys, Wiz, CyberArk, Splunk, ServiceNow, Jira, Confluence, GRC Archer, WDesk, Nexus, Jenkins, Harness, Fortify, EKS, Openshift, Bedrock, Sagemaker, H2O.ai, MLflow, Microsoft Excel
1mo
Save
Mark Applied
Hide
Senior Vendor Security Risk Management Analyst
Johnston, Rhode Island, United States
$106k-$152k/yr HybridFull Time
5+ YOE5+ years in cybersecurity or cyber risk with TPRM; cloud security; vendor risk assessment; certifications preferred.
Microsoft Office
4d
Save
Mark Applied
Hide
Principal Enterprise Risk Management Analyst
Hillsboro or Marlborough or Chelmsford
$147k-$176k/yr HybridFull Time
8+ YOE8+ years ERM experience, bachelor\u0002s degree or equivalent experience, deep knowledge of enterprise/technology/operational risk, governance, risk methodologies, and regulatory support; preferred CRISC,CISA,CISSP,CGEIT,PMP,CERM.
1w
Save
Mark Applied
Hide
IT Risk & Compliance Analyst
North Andover or United States
$84k-$94k/yr RemoteFull Time
3+ YOEBachelor's or equivalent; 3+ years IT compliance/internal audit/GRC experience; working knowledge of ITGCs and SOX; experience with GRC/audit platforms; strong communication and organizational skills.
Optro (AuditBoard), ServiceNow GRC, Archer, MetricStream, Jira, Microsoft Power Automate, SQL, Python, APIs
2mo
Save
Mark Applied
Hide
Senior Analyst, Cybersecurity Risk & Compliance
Wilmington, Massachusetts, United States
$103k-$141k/yr OnsiteFull Time
4+ YOECybersecurity risk management and IT compliance experience; knowledge of NIST CSF, SOC 2, ISO 27001, GDPR, HIPAA, FedRAMP; audit readiness; third‑party risk.
NIST CSF, SOC 2, ISO 27001, GDPR, HIPAA, FedRAMP, CMMC, ITAR, EAR
2w
Save
Mark Applied
Hide
Senior Compliance and Risk Analyst
United States or San Francisco or San Jose or New York City or Chicago or Austin or Denver or Boston or Washington or Philadelphia or Portland or Seattle or Miami or California or Alaska or Delaware or Hawaii or Idaho or Iowa or Montana or Nebraska or North Dakota or Rhode Island or South Dakota or West Virginia
$165k-$233k/yr RemoteFull Time
5+ YOE5+ years in compliance/GRC in a technology/SaaS environment; SOC 2 and ISO 27001 experience; knowledge of NIST, GDPR, HIPAA; experience with compliance automation platforms and UARs; strong project management and communication.
SOC 2, ISO 27001, NIST, GDPR, HIPAA, Drata, Vanta, Tugboat Logic, PCI DSS, FedRAMP
1w
Save
Mark Applied
Hide
GRC Analyst - Third Party Risk
Boston, Massachusetts, United States
$70k-$110k/yr OnsiteFull Time
2+ YOE2+ years GRC experience, knowledge of ISO 27001, NIST CSF, COSO, SOC 2, PDI-DSS, bachelor’s degree, strong organizational and communication skills.
ISO 27001, NIST CSF, COSO, SOC 2, PDI-DSS
2d
Save
Mark Applied
Hide
Senior GRC Analyst
Boston, Massachusetts, United States
$130k-$170k/yr OnsiteFull Time
6+ YOE6+ years in cybersecurity or enterprise risk; experience conducting structured cyber/IT risk assessments, maintaining risk registers, familiarity with security frameworks and AI risk; strong communication and analysis skills.
NIST CSF, ISO 27001, PCI DSS, GDPR, HIPAA, NIST AI RMF, ISO/IEC 42001, FAIR
1mo
Save
Mark Applied
Hide
GRC Analyst
Lowell, Massachusetts, United States
$78k-$125k/yr OnsiteFull Time
1+ YOEBachelor's in relevant field (or equivalent), 1–3 years information security/risk/compliance experience, knowledge of security frameworks, strong analytical and communication skills, and willingness to learn ServiceNow GRC.
ServiceNow GRC, NIST, ISO 27001, SOC2, CIS, ISO9001, ISO14001
1mo
Save
Mark Applied
Hide
IT Compliance Analyst
Billerica, Massachusetts, United States
HybridFull Time
5+ YOE5+ years IT compliance/risk, SOX/NIST/ISO knowledge; bachelor’s in IS/cybersecurity/accounting or related; strong documentation and audit support skills.
ERP systems, GRC tools, LIMS, cloud platforms (AWS, Azure), SOX, NIST, SOC, ISO
1mo
Save
Mark Applied
Hide
RMF Cybersecurity Analyst
Lexington, Massachusetts, United States
$62k-$141k/yr OnsiteFull Time
2+ YOE2+ years evaluating systems against the Risk Management Framework (RMF) using DoD policies, ISSO/ISSM experience, eMASS ATO package development, RMF documentation experience, Secret clearance, HS diploma/GED, and DoD 8140 certification.
Risk Management Framework (RMF), Enterprise Mission Assurance Support Service (eMASS), Security Technical Implementation Guides (STIGs), Security Content Automation Protocol (SCAP), Assured Compliance Assessment Solution (ACAS), Ports, Protocols, and Services Matrix, Vulnerability Remediation Asset Manager (VRAM), Host Based Security System (HBSS)
3mo
Save
Mark Applied
Hide
Senior Security Compliance Analyst
Burlington or United States
$140k-$180k/yr HybridFull Time
4+ YOEBuild and operationalize a SaaS security and compliance program aligned to SOC 2, ISO 27001, NIST and GDPR; lead risk management, third-party risk, control testing and audit readiness; 4+ years security/compliance experience; cloud experience (AWS/Azure/GCP).
SOC 2, ISO 27001, NIST, GDPR, PCI-DSS, HIPAA, AWS, Azure, GCP, SCA, DAST, SAST, Terraform, Cloud Custodian
1mo
Save
Mark Applied
Hide
Senior Cybersecurity Analyst (GRC)
Boston or United States
$90k-$130k/yr RemoteFull Time
6+ YOE6+ years information security experience focused on governance, risk, and compliance; bachelor’s preferred; certifications such as CISA/CRISC/CISSP preferred; knowledge of NIST CSF 2.0, HIPAA/HITECH; strong data analysis and communication skills.
Microsoft Excel, Microsoft SharePoint, NIST CSF 2.0, HIPAA, HITECH
3w
Save
Mark Applied
Hide
Senior Security Analyst I
Boston or Seattle
$141k-$176k/yr RemoteFull Time
6+ YOE6+ years in detection & response, insider risk, or security engineering; hands-on UEBA/SIEM/DLP/UAM/SOAR; scripting with Python/Go/Bash; familiarity with macOS, Windows, Linux, Kubernetes and cloud; knowledge of MITRE ATT&CK and NIST.
UEBA, SIEM, DLP, UAM, SOAR, Python, Go, Bash, macOS, Windows, Linux, Kubernetes, Pandas, MITRE ATT&CK, NIST
6d
Save
Mark Applied
Hide
ERP Vendor Management Analyst
Kansas City or St. Louis or Cleveland or Philadelphia or Chicago or San Francisco or New York or Boston or Atlanta or Minneapolis or Dallas or Richmond
$95k-$166k/yr HybridFull Time
7+ YOEBachelor's degree required (Master's preferred), 7+ years vendor management/procurement experience, strong contract negotiation, risk management, analytics, and stakeholder communication skills.
Microsoft Office 365
2mo
Save
Mark Applied
Hide
Sr. Cyber Security Analyst
Marlborough, Massachusetts, United States
$112k-$148k/yr OnsiteFull Time
7+ YOE7+ years cyber security experience; SIEM and incident response; Azure/M365 security and compliance; strong process documentation and risk focus; good communication and independent work skills.
Microsoft Defender, Microsoft Entra ID, Azure AD, M365, Purview, DLP, eDiscovery, Information Protection, Conditional Access, MFA
Explore Jobs