1

Cissp Grc Jobs in Illinois (NOW HIRING)

GRC Analyst The GRC Analyst is a member of the IT Security team and works closely with other IT ... CISSP or CISA certifications * Security Ops, Cyber Security or programming experience * Technical ...

GRC Specialist II Skills: * Four (4) years of Information Security experience required, with hands ... Certified Information Systems Security Professional (CISSP), Certified Information Security Auditor ...

GRC Lead - Chicago, IL

Chicago, IL · On-site

$125K - $175K/yr

Savant is hiring a GRC Lead to design, build, and own our governance, risk, and compliance program ... Relevant certifications (CISSP, CISA, CRISC, etc.) - helpful, but not required What matters most is ...

Savant is hiring a GRC Lead to design, build, and own our governance, risk, and compliance program ... Relevant certifications (CISSP, CISA, CRISC, etc.) - helpful, but not required What matters most is ...

IT GRC Analyst

Bloomington, IL · On-site

$42.75 - $57/hr

Responsibilities The IT GRC Analyst will work on a team of certified Payment Card Industry Internal ... Security+, CISSP, GSEC, AWS, Azure, Microsoft, CISA, CISM, PCI ISA or PCI QSA. * Proven experience ...

IT GRC Analyst

Bloomington, IL · Hybrid

$42.75 - $57/hr

Security+, CISSP, GSEC, AWS, Azure, Microsoft, CISA, CISM, PCI ISA or PCI QSA. * Proven experience ... GRC technical analyst/architect, specifically with the GRC related modules within ServiceNow.

Cybersecurity GRC Compliance Lead

Chicago, IL · On-site

$83.10K - $141.30K/yr

The Cybersecurity GRC Compliance Lead will act as a subject matter expert in the delivery of the ... Relevant certifications such as CISSP, CISM, CRISC, or similar. Applicants must be authorized to ...

Cybersecurity GRC Compliance Lead

Chicago, IL · On-site

$83.10K - $141.30K/yr

The Cybersecurity GRC Compliance Lead will act as a subject matter expert in the delivery of the ... Relevant certifications such as CISSP, CISM, CRISC, or similar. Applicants must be authorized to ...

IT Security (GRC) Manager The IT Security (GRC) Manager function is responsible for maintaining ... Certified Information Security Manager, Certified Information Systems Security Professional (CISSP ...

next page

Showing results 1-20

Cissp Grc information

What are the key skills and qualifications needed to thrive as a CISSP GRC professional, and why are they important?

To thrive as a CISSP GRC (Governance, Risk, and Compliance) professional, you need deep knowledge of information security principles, risk management frameworks, and regulatory compliance, typically validated by the CISSP certification. Familiarity with tools such as GRC platforms (e.g., RSA Archer, ServiceNow GRC), risk assessment software, and compliance tracking systems is essential. Strong analytical thinking, attention to detail, and effective communication skills help you interpret complex regulations and collaborate with diverse stakeholders. These skills are critical to ensuring organizations meet regulatory requirements, manage risks proactively, and maintain a robust security posture.

How does a CISSP GRC professional typically collaborate with IT, legal, and business teams within an organization?

A CISSP GRC (Governance, Risk, and Compliance) professional often acts as a bridge between technical, legal, and business stakeholders. They work closely with IT teams to ensure security controls align with organizational policies, coordinate with legal departments to interpret regulatory requirements, and advise business leaders on risk management strategies. Regular cross-functional meetings, risk assessments, and policy reviews are common, making strong communication skills essential. This collaborative approach ensures that security and compliance initiatives support both regulatory standards and business objectives.

What is a CISSP GRC professional?

A CISSP GRC professional is an expert who combines the Certified Information Systems Security Professional (CISSP) certification with knowledge and experience in Governance, Risk, and Compliance (GRC) practices. These professionals help organizations align their security programs with business objectives, manage risks, and ensure compliance with relevant regulations and standards. They are responsible for developing, implementing, and monitoring security policies, procedures, and controls, while also conducting risk assessments and audits. Their work is critical for maintaining an organization's information security posture and meeting regulatory requirements.

What is the difference between Cissp Grc vs Cissp Security Analyst?

AspectCissp GrcCissp Security Analyst
CertificationsCissp, GRC-focused certificationsCissp, Security certifications
Work EnvironmentGovernance, risk management, compliance teamsSecurity operations, incident response teams
Employer & IndustryOrganizations with compliance and risk needsOrganizations focusing on security monitoring

The Cissp Grc role primarily focuses on governance, risk management, and compliance, working closely with organizational policies. In contrast, a Cissp Security Analyst concentrates on security operations, monitoring, and incident response. While both roles require Cissp certification, their daily tasks and focus areas differ significantly, making each suitable for different career paths within cybersecurity.

What job categories do people searching Cissp Grc jobs in Illinois look for? The top searched job categories for Cissp Grc jobs in Illinois are:
What cities in Illinois are hiring for Cissp Grc jobs? Cities in Illinois with the most Cissp Grc job openings:
GRC Analyst

Other

This job post has expired today. Applications are no longer accepted.


Job description

GRC Analyst

The GRC Analyst is a member of the IT Security team and works closely with other IT teams and business stakeholders in the development and automation of core functions supporting the Information Security program. The GRC Analyst will work to support the continued maturity of the GRC program through the development and compliance of IT Security policies and procedures and Security Awareness training. He/she will also support GRC Audit deliverables and respond to client related security inquiries.

What You'll Be Doing
  • Support client needs by providing thorough and timely responses to security inquires and questionnaires; participates with onsite and virtual audits and risk remediation.
  • Support the GRC program through service delivery of operational activities and related functions to include but not limited to vendor management, security awareness, audit and compliance and exception management.
  • Provide input and analysis in the development and deployment of IT Security service deliverables to include but not limited to policy and procedures, risk assessment and control evaluation, security awareness and training, exception management and risk remediation.
  • Provide platform administration of GRC related solutions, as required and develop/maintain system documentation supporting usage of third party solutions in the delivery of vendor management, security awareness training and phishing campaigns.
  • Provide input and consultation to IT and business resources in the mapping and alignment of Security Policies against prescribed control frameworks, to include but not limited to ISO 27001, ISF Standard of Good Practice for Information Security.
  • Maintain dashboards and reporting of respective service deliverables for inclusion in monthly metrics.
  • Liase with IT and Business Risk Owners in the management of risk treatment/acceptance plans to include creation, tracking, closure and reporting of compliance status within GRC platform.
  • Liase with IT and Business Risk Owners in the management of risk treatment/acceptance plans for related security risks and work within the information security governance process to define control recommendations that are both efficient and effective.
  • Participate and contribute to information security working groups and team meetings.
  • Maintain documentation of client interactions, risk assessments and IT Security Polices and supporting procedures within document management system.
  • Other duties as needed.
Skills We're Seeking
  • 3+ years of experience with IT Security and/or relevant IT Governance, Risk and Compliance experience
  • Experience with GRC tools, such as RSAM (what we use)
  • Experience with ISO 27001
Nice To Haves
  • Bachelor's Degree in a relevant field
  • CISSP or CISA certifications
  • Security Ops, Cyber Security or programming experience
  • Technical writing experience

1872 Consulting logo

About 1872 Consulting

Sourced by ZipRecruiter

1872 Consulting, based in Chicago, IL, USA, operates within the IT consulting industry. Armed with a diverse team of experts, the company offers specialized IT consulting services, focusing on modernizing business technologies and driving innovative business strategies. Established in 1872, the company has a rich history marked by its commitment to bridging the gap between businesses and technology. Its mission is to empower organizations to surpass their business goals by providing state-of-the-art IT solutions and service. The company prides itself on its core values of integrity, excellence, and innovation, instilling these principles in every project they undertake.

Industry

It services

Company size

11 - 50 Employees

Headquarters location

Chicago, IL, US

Year founded

2014