ZipRecruiter

Log In

1

Contractual Cyber Security Data Analyst Jobs (NOW HIRING)

Tallgrass

Analyst-Cyber GRC, Sr.

Lakewood, CO · On-site

$100K - $129K/yr

Contractual Cybersecurity Review: * Serve as the security function's primary reviewer of incoming ... Provide recommended redlines and risk-based guidance for contract requirements related to data ...

Tallgrass

Analyst-Cyber GRC, Sr.

Lakewood, CO · On-site

$99K - $128K/yr

Contractual Cybersecurity Review: * Serve as the security function's primary reviewer of incoming ... Provide recommended redlines and risk-based guidance for contract requirements related to data ...

Inficare Technologies

Data Analyst

Phoenix, AZ · On-site

The analyst will work on cybersecurity data sets (e.g., threat, vulnerability, and operational telemetry) to develop metrics, support reporting, and provide insights that strengthen security posture.

Phase2 Technology

Cybersecurity Data Scientist

Mclean, VA · On-site

$77.60 - $176/hr

R0240149 The Opportunity As a Cybersecurity Data Scientist, you will operate as a hands‑on ... Leverage strong analytical, statistical, and communication skills to assess complex security and ...

Pantheon Data

Data Analyst

Washington, DC · On-site

$70K - $100K/yr

... cybersecurity. We have also grown our customer base to include commercial clients. The company has ... Rather, salary will be set based on experience, geographic location and possibly contractual ...

Pantheon Data

Data Analyst

Washington, DC · On-site

$70K - $100K/yr

... cybersecurity. We have also grown our customer base to include commercial clients. The company has ... Rather, salary will be set based on experience, geographic location and possibly contractual ...

Nisga'a Ciops

MRT-C Data Analyst

Colorado Springs, CO · On-site

$70K - $95K/yr

Manually enter cross-functional cyber security data into the customer's database and visualization ... Collaborate with Mission Analyst teammates on data initiatives, integrations, and other system ...

Nisga'a Ciops

MRT-C Data Analyst

Colorado Springs, CO

$70K - $95K/yr

Manually enter cross-functional cyber security data into the customer's database and visualization ... Collaborate with Mission Analyst teammates on data initiatives, integrations, and other system ...

Goldbelt, Inc.

MRT-C Data Analyst

Colorado Springs, CO · On-site

$70K - $95K/yr

Manually enter cross-functional cyber security data into the customer's database and visualization ... Collaborate with Mission Analyst teammates on data initiatives, integrations, and other system ...

Goldbelt Inc

MRT-C Data Analyst

Colorado Springs, CO · On-site

$70K - $95K/yr

Manually enter cross-functional cyber security data into the customer's database and visualization ... Collaborate with Mission Analyst teammates on data initiatives, integrations, and other system ...

next page

Showing results 1-20

All JobsContractual Cyber Security Data Analyst Jobs

Contractual Cyber Security Data Analyst information

See salary details

$43K

$99.4K

$150K

How much do contractual cyber security data analyst jobs pay per year?

As of Aug 16, 2026, the average yearly pay for contractual cyber security data analyst in the United States is $99,400.00, according to ZipRecruiter salary data. Most workers in this role earn between $79,500.00 and $115,500.00 per year, depending on experience, location, and employer.

What is a contractual cyber security data analyst?

Contractual Cyber Security Data Analysts are professionals hired on a contract basis to analyze and interpret data related to an organization's cyber security. They assess threats, monitor network activity, identify vulnerabilities, and help develop strategies to protect sensitive information. Unlike permanent employees, contractual analysts are typically brought in for specific projects or to address immediate security needs. They work with various security tools and collaborate with IT teams to ensure robust cyber defense. Their expertise is crucial in helping organizations mitigate risks and respond effectively to cyber incidents.

What are the key skills and qualifications needed to thrive as a contractual cyber security data analyst?

A Contractual Cyber Security Data Analyst requires strong analytical abilities, knowledge of cybersecurity principles, and expertise in data analysis, usually supported by a degree in computer science or a related field. Familiarity with tools such as SIEM platforms (e.g., Splunk), scripting languages (like Python), and relevant certifications (such as CompTIA Security+ or CISSP) is typical. Attention to detail, problem-solving skills, and effective communication distinguish top performers in this role. These competencies are crucial for accurately identifying threats, protecting organizational assets, and ensuring clear reporting in dynamic, project-based environments.

What are some common challenges a contractual cyber security data analyst may face when working with multiple clients?

As a Contractual Cyber Security Data Analyst, you'll often juggle projects for several clients, each with unique security protocols and data formats. Adapting quickly to different network environments and compliance standards can be challenging, especially when switching between clients with varying levels of cyber maturity. Effective communication and time management are key, as you'll need to deliver actionable insights while coordinating with in-house IT and security teams remotely. Staying organized and flexible helps ensure you meet deadlines and maintain high-quality analysis across diverse engagements.

What cities are hiring for Contractual Cyber Security Data Analyst jobs?

Cities with the most Contractual Cyber Security Data Analyst job openings:

What are the most commonly searched types of Cyber Security Data Analyst jobs?

The most popular types of Cyber Security Data Analyst jobs are:

Contractual Cyber Security Data Analyst jobs near you

Analyst-Cyber GRC, Sr.

Tallgrass

Lakewood, CO • On-site

$100K - $129K/yr

Other

Medical, Life, Retirement, PTO

Posted 12 days ago

Job description


Primary purpose:
  • The Information Technology Governance, Risk, and Compliance (GRC) team supports Tallgrass's cybersecurity risk and compliance program across the enterprise. This includes cyber risk management, policy and standards governance, third-party risk management, contractual cybersecurity review, compliance monitoring, control assessments, security awareness, and audit readiness.
  • The Senior Analyst, Cyber GRC supports the continued improvement of Tallgrass Energy's cybersecurity posture by assessing risk, evaluating controls, supporting compliance obligations, and recommending practical safeguards to reduce risk. This role serves as a key advisor to business and technology stakeholders and helps ensure cybersecurity requirements are understood, documented, and implemented effectively.
  • This position also serves as the security function's primary reviewer of incoming contractual cybersecurity language and works closely with Legal, Supply Chain/Sourcing, IT, Security Operations, Engineering, and business stakeholders on contract reviews, obligation mapping, risk assessments, issue management, and control governance.

Responsibilities
Essential Duties & Responsibilities:
Governance, Risk, and Compliance:
  • Support the execution and continuous improvement of the cybersecurity GRC program, including governance, risk assessment, compliance monitoring, control evaluation, and issue management activities.
  • Assist with the development, maintenance, communication, and governance of cybersecurity policies, standards, procedures, control requirements, ownership expectations, evidence requirements, and exception processes
  • Clarify control owner accountability by helping define control ownership, evidence expectations, remediation obligations, and reporting requirements.
  • Conduct or support cybersecurity risk assessments, control evaluations, compliance assessments, and audit readiness activities.
  • Track risks, findings, exceptions, remediation plans, risk acceptances, and closure evidence through completion.
  • Develop compliance matrices, control mappings, gap analyses, risk summaries, and management-level reporting/dashboards.

Regulatory Compliance and Audit Support:
  • Support compliance efforts related to applicable cybersecurity and regulatory requirements, including TSA Security Directives, privacy requirements, and NERC CIP, where applicable.
  • Monitor relevant regulatory and industry developments and assist with interpreting, coordinating, and tracking required actions.Support internal and external audits, regulatory reviews, compliance assessments, customer security inquiries, and evidence-gathering activities.
  • Partner with control owners to collect, validate, and maintain evidence of control design and operating effectiveness.
  • Track open compliance and audit findings, prepare status updates, and escalate aging or high-risk items as appropriate.

Contractual Cybersecurity Review:
  • Serve as the security function's primary reviewer of incoming contractual cybersecurity language, including customer, vendor, supplier, and third-party agreements.
  • Partner with Legal, Supply Chain/Sourcing, business stakeholders, and technology teams to review cybersecurity, privacy, compliance, and risk-related contract provisions.
  • Provide recommended redlines and risk-based guidance for contract requirements related to data protection, access control, incident notification, audit rights, regulatory compliance, business continuity, disaster recovery, subcontractor flow-downs, vulnerability management, and security assessments.
  • Assess proposed contractual requirements against Tallgrass cybersecurity policies, standards, technical capabilities, regulatory obligations, and existing controls.
  • Map contractual obligations to applicable frameworks, regulatory requirements, internal policies, standards, and controls.
  • Identify contractual cybersecurity gaps, operational risks, and potential control deficiencies; recommend mitigation options and track related actions through completion.

Third-Party Risk Management:
  • Support the cybersecurity third-party risk management program for vendors, service providers, contractors, and other third parties that access Tallgrass systems, data, facilities, or networks.
  • Review vendor security questionnaires, SOC reports, certifications, penetration test summaries, policies, and other due diligence documentation.
  • Assess third-party security controls against company policies, standards, regulatory requirements, contractual obligations, and industry best practices.
  • Partner with Legal, Procurement, Privacy, business owners, and Cyber Security to define proportionate contract and security requirements.
  • Support ongoing monitoring and reassessment of critical third parties.

Threat, Vulnerability, IAM, and Security Awareness Governance:
  • Provide GRC oversight of threat and vulnerability management activities, including remediation tracking, exception handling, risk reporting, and alignment with policy and regulatory requirements.
  • Partner with IT Security, infrastructure, application, and operational technology teams to monitor vulnerability findings, remediation plans and overdue items.
  • Provide GRC oversight of identity and access management controls, including user access reviews, privileged access governance, provisioning and deprovisioning, segregation of duties, and exception management.
  • Support cybersecurity awareness and training activities, including training coordination, completion tracking, phishing simulation metrics, policy acknowledgments, and employee security communications.
  • Support records and information governance activities related to cybersecurity, privacy, data handling, information classification, retention, legal hold, evidence management, and compliance requirements.
  • Maintain awareness of cybersecurity trends, regulatory developments, risk management practices, and industry standards.

Qualifications
Education:
  • Bachelor's degree from an accredited college or university.
  • Minimum of five years of experience in cybersecurity, information security, risk management, risk assurance, compliance, third-party risk management, audit, or a related field may be considered as a substitute for a degree

Experience/Specific Knowledge:
  • Experience conducting or supporting risk assessments, control evaluations, compliance assessments, vulnerability assessments, and audit readiness activities.
  • Experience reviewing cybersecurity, privacy, compliance, or risk-related contract language.
  • Experience mapping contractual, regulatory, customer, or internal requirements to cybersecurity frameworks, policies, standards, controls, and evidence.
  • Experience supporting third-party/vendor risk management, including vendor due diligence, security assessments, remediation tracking, and ongoing monitoring.
  • Experience reviewing vendor security documentation, such as SOC 1/SOC 2 reports, ISO certifications, security questionnaires, policies, control attestations, or penetration test summaries.
  • Proficiency with risk assessment methodologies, tools, and techniques.
  • Strong understanding of cybersecurity controls, risk management, business continuity, disaster recovery, control ownership, and exception governance.
  • Familiarity with GRC tools, third-party risk management platforms, or similar systems.
  • Understanding of cybersecurity frameworks, standards, and best practices, such as NIST Cybersecurity Framework, NIST SP 800-53, ISO 27001, SOC 2 Trust Services Criteria, TSA Security Directives, and applicable privacy requirements.
  • Ability to communicate governance, risk, compliance, and audit concepts effectively to technical teams, business stakeholders, and executives.

Certifications, Licenses & Registrations:
  • Must possess and maintain a valid driver's license and a driving record satisfactory to the company and its insurers (for travel).

Competencies, Skills & Abilities:
  • Strong written and verbal communication skills, including the ability to explain technical or control requirements to non-technical stakeholders.
  • Ability to organize competing priorities, meet deadlines, and maintain accurate documentation.
  • Sound judgment, accountability, and professionalism when handling sensitive company information.
  • Ability to work collaboratively across functional boundaries and influence outcomes without relying solely on reporting authority.
  • Strong analytical, research, interviewing, negotiation, and evidence-management skills.
  • Ability to apply a risk-based approach to determine the appropriate depth of review.

Physical Demands:
  • All the physical requirements listed below are those that may be necessary for an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made for individuals with disabilities to perform the essential functions.
  • Must be able to sit for prolonged periods of time.
  • The employee is regularly required to use hands to type, touch, handle, or feel; talk and hear; and frequently stand and reach with hands and arms.
  • The employee is occasionally required to walk, climb, balance, bend, stoop, squat, crouch, kneel, push, or pull.
  • The employee must regularly lift or move up to 10 pounds and occasionally lift or move up to 25 pounds.

Working Conditions:
  • Will work non-traditional hours as needed.
  • Required to carry a cell phone and be available to respond during working and non-working hours when assigned.
  • Candidates will be required to clear a drug screen and complete a background check, including a credit report for certain positions after an offer has been extended and prior to being employed.

Supervisory Responsibility:
  • No direct supervisory responsibility. Coordinates vendor, business-owner, and control-owner actions through the assessment lifecycle.

Preferred Education, Experience, Certifications, Competencies, Skills & Abilities:
Above the minimum requirements, not required but advantageous in this position:
  • CRISC, CISA, CISM, CISSP, enterprise-risk, audit, or comparable certification,
  • Experience with governance, risk, compliance, workflow, or analytics platforms.
  • Experience assessing technology vendors in energy, infrastructure, or another regulated industry.

Compensation:
  • The annual salary range for this position will be $105,400-$158,200/yr.

Other Responsibilities:
  • The above statements describe the general nature and level of work being performed. This position may perform other duties as assigned.

About Us
Tallgrass was named one of the Top Workplaces USA and highlighted in Colorado's Top Workplaces for the past seven consecutive years. Tallgrass is a leading energy infrastructure company focused on safely, reliably, and sustainably delivering the energy and services that power our nation and enable our quality of life.
At Tallgrass, we value our teams and strive to create an environment where employees feel respected, and their contributions are valued. We aim to support employees' physical, mental, and financial well-being through a comprehensive Total Rewards Program.
  • Industry competitive pay
  • Health insurance package options that include Flexible Spending & Health Savings Accounts
  • Infertility Coverage
  • Parental Leave
  • 401(k) with up to a 6% match that vests immediately plus an employer discretionary contribution of up to 4%
  • Wellness Programs and Mental Health Resources
  • Employer-paid life insurance, short-term disability, and long-term disability coverage
  • Critical Illness & Accident Insurance
  • Vacation, sick days, paid caregiver leave, volunteer and bereavement paid time off
  • Identity theft protection
  • Annual discretionary bonus
  • Generous Tuition Reimbursement Program
  • Company-paid holidays and floating holidays
  • Company vehicle (if applicable)
  • Employee discounts; vehicles, tires, cellular plans, and more
  • Networking and employee engagement events
  • Personal development to grow your career with us based on your strengths and interests

Application Deadline: Recruiting timelines vary by position; however, all Tallgrass positions accept applications for at least five business days from the posting date. This position is open and still accepting applications.
Compensation: Compensation ranges are provided in good faith based on what we anticipate when researching wages for this position at the state and national levels. We may ultimately pay more or less than the posted range. This salary range may also be modified in the future.
Notice to External Search Firms: Tallgrass does not accept unsolicited resumes from search firms or employment agencies. Unsolicited referrals and resumes are considered Tallgrass property; therefore, Tallgrass will not pay a fee for any placement resulting from the receipt of an unsolicited referral. Approved vendors may be invited to refer talent for specific positions at Tallgrass's request only. A fully executed agreement with Tallgrass must be in place and current in these cases.
EEO Statement: Tallgrass complies with all Equal Employment Opportunity (EEO) affirmative action laws and regulations. Tallgrass does not discriminate on the basis of age, race, religion, color, sex, national origin, marital status, genetic information, sexual orientation, gender Identity and expression, disability, veteran status, pregnancy status, or other status protected by law.

Apply