{"id":3411506,"url":"https://alion.io/job/saic-cybersecurity-grc-senior-analyst","title":"Cybersecurity GRC Senior Analyst","company":{"id":58788,"name":"SAIC","domain":"saic.com","url":"https://alion.io/company/saic","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"B","score":77,"open_postings":71,"ghost_share":0,"stale_share":0.901,"repost_share":0,"time_to_fill_p50_days":24,"computed_at":"2026-11-03T05:54:40Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Front Royal, United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":116000,"max_usd":221000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":1385},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"ITIL","optional":false},{"name":"ServiceNow","optional":false},{"name":"DLP","optional":true}],"status":"closed","first_seen_at":"2026-10-28T15:30:50Z","employer_posted_date":"2026-10-28","last_verified_at":"2026-10-31T16:02:22Z","board_verified":false,"closed_at":"2026-10-31T16:02:22Z","days_open":3,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":3},"description":"SAIC is seeking a Cybersecurity GRC Senior Analyst to join the Governance, Risk and Compliance (GRC) Team. For the right candidate, this position may be remote anywhere in the United States.\nThe Cybersecurity Governance, Risk, and Compliance (GRC) Senior Analyst supports enterprise cyber risk management by leading application, system, and vendor risk assessments; validating control effectiveness; coordinating remediation through mitigation plans; and driving continuous improvement of the Cybersecurity Risk Management Program. The role operates as a second line of defense partner to technical process teams and stakeholders, ensuring risk-informed decisions and measurable risk reduction in alignment with regulatory and enterprise standards.\nResponsibilities include:\nMaintain current awareness of cybersecurity trends and threats to inform risk mitigation strategies.\nAssist with application and system/infrastructure risk assessments and reassessments; document results and track remediation to closure.\nConduct third-party (vendor) risk assessments; collaborate with procurement, legal, and business owners on risk treatment.\nConduct supply chain risk management risk and compliance assessments.\nAssist with operational cyber activities including, but not limited to carbon black application whitelisting reviews, processing international travel requests and managing violations, software assessments/evaluations.\nSelect, implement, and assess security controls per NIST SP 800-171; validate effectiveness.\nDrive continuous monitoring using NIST SP 800-39; maintain dashboards and key risk indicators.\nManage vulnerability and penetration test findings; coordinate with system owners to remediate within SLAs.\nAuthor and maintain risk management program documentation; prepare audit evidence and participate in internal/external audits (ISO/IEC 27001, SOC reports, and related standards).\nRecommend updates to cybersecurity policies, standards, and procedures based on control gaps and remediation outcomes.\nDevelop and deliver training and guidance to stakeholders to strengthen a risk-aware culture.\nAssist with configuration and maintenance of GRC tooling (e.g., ServiceNow GRC or equivalent) to support workflow, evidence management, and reporting.\nCollaborate across security, IT, and business teams; escalate material risks to senior leadership with clear risk statements and options.\n Required Skills:\nBachelor’s degree in Information Technology or similar discipline and 5 years of experience, or Master’s Degree and 3 years of experience. An additional 4+ years of experience may be considered in lieu of a degree.\nCertifications such as CISA, CISSP, CISM, or Security+.\nComprehensive understanding and applied experience with cybersecurity frameworks and regulations (NIST RMF, NIST SP 800-53/171, ISO/IEC 27001, COBIT, COSO, MITRE, ITIL, HITRUST, SOC reporting). \nAbility to categorize systems and information per FIPS 199 and NIST SP 800-60. \nStrong analytical skills; able to synthesize complex information and defend independent judgments. \nExcellent written and verbal communication; able to translate technical risk into business-focused language and narratives. \nStrategic and self-directed work style with effective collaboration and negotiation across diverse stakeholders. \nDemonstrated ability to manage multiple projects, prioritize based on urgency and impact, and meet deadlines.\nDesired Skills:\nWorking knowledge of ServiceNow and/or other GRC tools.\nWorking knowledge of security tools for vulnerability scanning, DLP, endpoint protection, etc.\nTechnical proficiency in Cybersecurity.","description_format":"text","description_chars":3620,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Security Compliance","Engineering Services"],"lifecycle":[{"event":"open","at":"2026-10-28T18:01:20Z"},{"event":"close","at":"2026-10-31T16:02:22Z"}],"visa":[],"liveness":null,"pay":null,"html_url":"https://alion.io/job/saic-cybersecurity-grc-senior-analyst","json_url":"https://alion.io/job/saic-cybersecurity-grc-senior-analyst.json","meta":{"generated_at":"2026-11-03T12:44:13Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":17616,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":58788},"rest":"https://alion.io/mcp/rest/get_company?id=58788"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsaic-cybersecurity-grc-senior-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsaic-cybersecurity-grc-senior-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsaic-cybersecurity-grc-senior-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/saic-cybersecurity-grc-senior-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsaic-cybersecurity-grc-senior-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3411506}},{"tool":"search_jobs","arguments":{"company":"saic.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3411506},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}