{"id":3987112,"url":"https://alion.io/job/bh-publishing-it-security-analyst-grc","title":"IT Security Analyst – GRC","company":{"id":1802362,"name":"B&H Publishing","domain":"bhpublishinggroup.com","url":"https://alion.io/company/bhpublishinggroup","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"iCIMS","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"NIST CSF","optional":false},{"name":"OWASP","optional":false},{"name":"PCI DSS","optional":false}],"status":"live","first_seen_at":"2026-11-09T21:59:22Z","employer_posted_date":"2026-11-09","last_verified_at":"2026-11-09T21:59:22Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Overview\nLifeway is seeking an IT Security Analyst - GRC to guide day-to-day IT security governance, risk management, and compliance across the organization. You'll support third-party risk assessments, PCI compliance efforts, and internal risk reviews that help protect customer and ministry data.\nWhy Lifeway?\nLifeway is a place where you can bring your faith and work experience to join in the most important mission in the world: making disciples of Jesus Christ. Whether you’re a creator or storyteller, data guru or problem-solver, or anywhere in between, if you’re passionate about serving the church, we have a place for you. Lifeway has a strong Work from Anywhere (WFA) culture that is deeply focused on our mission and values. While headquartered in Nashville, TN, many of our positions are remote-eligible and have autonomy and flexibility with work hours. We provide equipment and resources to ensure team members have access to a productive and ergonomic workspace. We believe building relationships and community is essential to how we work together, so Lifeway hosts all-team meetings several times per year and provides travel for key team gatherings for remote-based team members. Full-time employees are eligible for enrollment in our comprehensive benefits plans including healthcare, vacation and sick time, holiday pay, care days, 401(k) plan, maternity and parental leave, adoption assistance, mission trip time, and more. If this sounds like a place where you would be excited to serve the kingdom of God, we would love for you to join our team.\nLearn more about our culture at team.lifeway.com/culture-code\nThis is a remote position in the U.S. with occasional travel to Nashville for in-person team gatherings. #LI-Remote\nResponsibilities\nLives out Lifeway’s mission and values, showing deep commitment to Kingdom work\nLimited travel: 2-4 times per year, typically overnight\nSupport third-party risk management (TPRM) assessments and maintain the overall TPRM program \nPut security systems and programs in place to manage vulnerabilities \nUse industry frameworks to support governance and risk management across technology systems and processes \nSupport IT compliance and risk assessments, including PCI scans, assessments, remediation, and Right to Be Forgotten requests \nPerform internal risk assessments to confirm Lifeway's practices are secure and meet PCI and other standards and regulations \nContribute to developing and maintaining security policies, standards, and procedures \nCollaborate with internal and external departments on projects \nQualifications\nEducation\nBachelor's degree in computer science, cybersecurity, information technology, or a related field, required\nMaster's degree in computer science, cybersecurity, information technology, or a related field, preferred\nAdvanced graduate degree (PhD, etc.), not required\nSkills, Knowledge, & Experiences, required\nAbility to travel to the Middle Tennessee area 2-4 times annually for team gatherings\n3-5 years of IT risk, audit or compliance experience \n1-2 years of experience performing assessments and/or audits, and identifying and addressing security control gaps, abnormal behavior patterns, and attack techniques \nWorking knowledge of risk assessment and IT auditing methods \nWorking knowledge of security frameworks (NIST-CSF, PCI-DSS, MITRE, OWASP) \nGeneral knowledge of security domains and cloud security concepts, and familiarity with vulnerability assessment tools \nActively involved in an evangelical Christian church\nSkills, Knowledge, & Experiences, preferred\nSecurity+ or CISSP certification \nCISA or CISM certification \nGIAC, CCSK, or CCSP certification","description_format":"text","description_chars":3665,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":["Parental leave"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Publishing"],"lifecycle":[{"event":"open","at":"2026-11-09T21:59:22Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":24,"reasons":["conf:1","win:early"],"computed_at":"2026-11-09T23:53:08Z"},"pay":null,"html_url":"https://alion.io/job/bh-publishing-it-security-analyst-grc","json_url":"https://alion.io/job/bh-publishing-it-security-analyst-grc.json","meta":{"generated_at":"2026-11-09T23:53:08Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14049,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-10T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1802362},"rest":"https://alion.io/mcp/rest/get_company?id=1802362"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fbh-publishing-it-security-analyst-grc"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fbh-publishing-it-security-analyst-grc"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fbh-publishing-it-security-analyst-grc"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/bh-publishing-it-security-analyst-grc\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fbh-publishing-it-security-analyst-grc"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3987112}},{"tool":"search_jobs","arguments":{"company":"bhpublishinggroup.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3987112},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}