Cybersecurity Risk Control Analyst Jobs (NOW HIRING)

RESPONSIBILITIES:
Kforce has a client that is seeking a Cybersecurity/IAM Analyst I in Southlake, TX.
Position Purpose:
We are seeking a detail-oriented Experienced Cybersecurity Analyst to support cybersecurity, IT risk, and compliance activities within a healthcare environment, with a primary focus on SOX IT General Controls (ITGC) and NIST Cybersecurity Framework (NIST CSF) requirements.
The role will assist with control assessments, audit evidence, remediation tracking, security monitoring, and compliance activities while helping protect sensitive healthcare, financial, and clinical information.
Key Responsibilities:
* Support SOX ITauditing, including access reviews, IT operations, and related controls
* Collect, validate, and maintain audit evidence for internal and external audits
* Assist with control testing, documentation, exceptions, and remediation tracking
* Support NIST CSF control assessments, risk identification, and cybersecurity compliance activities
* Maintain control documentation, risk-control matrices, procedures, and audit records
* Collaborate with IT, Cybersecurity, Internal Audit, Finance, Engineering, Compliance, and Legal teams
* Support compliance requirements including SOX, NIST, and HIPAA as applicable
* Assist with security policies, procedures, awareness, and continuous control improvement
REQUIREMENTS:
* 1-3 years of experience in cybersecurity, IT audit, IT risk, GRC, IT compliance, or a related field
* Hands-on experience supporting SOX IT General Controls (ITGC), including access controls, IT operations, change management, and control testing
* Experience conducting or supporting user access reviews, access certifications, provisioning/deprovisioning, privileged access, and segregation of duties
* Experience collecting, reviewing, validating, and maintaining audit evidence for internal and external audits
* Strong understanding of control testing, control deficiencies, exceptions, remediation plans, and issue tracking
* Experience developing and maintaining Risk & Control Matrices (RCMs), control narratives, procedures, and compliance documentation
* Working knowledge of the NIST Cybersecurity Framework (NIST CSF) and cybersecurity risk and control assessments
* Familiarity with HIPAA and cybersecurity requirements related to protecting sensitive healthcare, financial, and clinical information
* Experience collaborating with cross-functional teams including IT, Cybersecurity, Internal Audit, Finance, Engineering, Compliance, and Legal
* Strong analytical, organizational, and documentation skills with a high level of attention to detail
The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.
We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave.
Note: Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in Kforce's sole discretion unless and until paid and may be modified in its discretion consistent with the law.
This job is not eligible for bonuses, incentives or commissions.
Kforce is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.
By clicking ?Apply Today? you agree to receive calls, AI-generated calls, text messages or emails from Kforce and its affiliates, and service providers. Note that if you choose to communicate with Kforce via text messaging the frequency may vary, and message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You will always have the right to cease communicating via text by using key words such as STOP.