Senior Cybersecurity GRC Analyst
King of Prussia, PA
Category: Regulatory/Compliance
Industry: Energy
Reference ID: JN -072026-107785
Date Posted: 08/06/2026
Shortcut: http://careers.eliassen.com/lRT3LP
Description:
On-site in either King of Prussia, PA or Denver, PA
Our client is seeking a Senior Cybersecurity Governance, Risk & Compliance (GRC) Analyst to support cybersecurity governance, regulatory compliance, and risk management initiatives within a critical infrastructure environment. This role is responsible for helping ensure compliance with cybersecurity regulatory requirements, monitoring risk remediation activities, supporting governance programs, and collaborating across business and technology teams to strengthen cybersecurity maturity. The ideal candidate will have a background in GRC, cybersecurity compliance, and risk management, with hands-on experience supporting Operational Technology (OT), SCADA, Industrial Control Systems (ICS), and critical infrastructure environments. This individual will partner with Information Technology, Legal, Enterprise Risk Management, Human Resources, and business stakeholders to drive compliance, governance, and cybersecurity risk reduction initiatives. Candidates must be able to work on-site four days a week in the Denver/Lancaster, PA area and must demonstrate real-world experience supporting, assessing, governing, or auditing OT/SCADA/ICS environments.
This is a full-time, permanent opportunity, offering a competitive salary and comprehensive benefits package. Qualified applicants must be willing and able to work on a w2 basis.
Salary: $80,000 - $105,000/ yr. w2
Responsibilities:
- Track compliance to cybersecurity regulatory requirements such as TSA and PUC.
- Assist with maintaining processes and procedure documentation that supports regulatory compliance.
- Support the review of policies and standards in collaboration with stakeholders.
- Collaborate to establish and track metrics for cybersecurity regulatory governance programs.
- Support development and maintenance of cybersecurity governance frameworks for OT and SCADA, aligning with standards including NERC CIP, IEC 62443, and NIST SP 800-82.
- Collaborate with stakeholders to monitor regulatory changes and industry developments.
- Track activities including tabletop exercises, architecture design reviews, TSA Cybersecurity Action Plan, and biennial cybersecurity audits.
- Track gaps from internal and external assessments to completion.
- Assist with tracking risk assessments and remediation for OT/SCADA systems, including ICS, PLCs, and remote monitoring infrastructure.
- Create awareness of compliance to company policies, standards, and regulatory requirements through monitoring and reporting.
- Collaborate with IT stakeholders to monitor cybersecurity exceptions and other IT operational activities that present gaps.
- Partner with IT, Legal, HR, and Enterprise Risk Management to align risk and compliance efforts.
- Ensure stakeholders have operational metrics to monitor their compliance.
- Deliver regular risk and compliance metrics for IT senior leadership in partnership with the Cybersecurity GRC team.
Experience Requirements:
- 4+ years of experience in GRC, risk management, or compliance roles.
- Strong understanding of GRC tools and platforms such as RSA Archer, ServiceNow GRC, or Fusion.
- Familiarity with frameworks and standards including NIST 800 series, COBIT, and FAIR.
- Proven experience supporting, assessing, governing, or auditing OT/SCADA/ICS environments.
- Analytical, problem-solving, and organizational skills.
- Written and verbal communication skills with stakeholder engagement capability.
- Certifications such as CISA, CRISC, CISSP, CMMC, or PCI preferred.
Education Requirements:
- Bachelor’s degree in Information Security, Risk Management, Computer Science, or related field.
Skills, experience, and other compensable factors will be considered when determining pay rate. The pay range provided in this posting reflects a W2 hourly rate; other employment options may be available that may result in pay outside of the provided range.
W2 employees of Eliassen Group who are regularly scheduled to work 30 or more hours per week are eligible for the following benefits: medical (choice of 3 plans), dental, vision, pre-tax accounts, other voluntary benefits including life and disability insurance, 401(k) with match, and sick time if required by law in the worked-in state/locality.
If anyone reaches out to you about an open position connected with Eliassen Group, please ensure that you are working directly with us by confirming the following:
· When you work with Eliassen Group, all email communication will come from an Eliassen.com address, never Gmail, Yahoo, etc.
· Eliassen Group will never ask you for personal information (home address, bank account, or check routing number) until you have worked with someone clearly associated with Eliassen Group.
If you have any indication of fraudulent activity, please contact fraud@eliassen.com.
-
Cybersecurity Audit Manager
Alexandria, VA
Description: Hybrid 2-3 days per week on-site in Alexandria, VA. The first 30 days of work will be full-time on-site. in Alexandria, VA Our client seeks a cybersecurity audit management professional to drive compliance with federal regulations and info...
Date Posted: 08/10/2026 Recommended
-
Policy & Procedure Documentation Specialist
Anywhere
Description: Remote Our client seeks a senior technical writer responsible for policy documentation supporting the enterprise risk framework and management within the Canadian Wealth business segment. The specialist will develop, maintain, and enhance ...
Date Posted: 08/19/2026 Recommended
-
Team Lead
Anywhere
Description: Remote Our client seeks a Team Lead to oversee a team of four technical writers responsible for policy documentation supporting the enterprise risk framework and management within the Canadian Wealth business segment. The specialist will d...
Date Posted: 08/19/2026 Recommended
-
Vice President, Information Technology
Chapel Hill, NC
Description: On-site Tuesday through Thursday in Chapel Hill, NC Our client seeks a Vice President, Information Technology to serve on the Senior Leadership Team and act as a strategic partner to the President and CEO. The leader will shape and advance...
Date Posted: 07/23/2026 Recommended
-
Policy & Procedure Documentation Specialist
Anywhere
Description: Remote Our client seeks a Policy & Procedure Documentation Specialist to develop, maintain, and enhance organizational policies, procedures, standards, work instructions, and related governance documentation. This role partners with busine...
Date Posted: 08/19/2026 Recommended
-
Product Owner
Raleigh, NC
Description: Onsite - Raleigh, NC Our client seeks an experienced Product Owner to modernize Call Reporting data and processes with primary focus on FR Y-14C. The role leads Agile delivery teams, manages a team of product analysts and associate product...
Date Posted: 07/31/2026 Recommended
-
Information Technology Risk & Controls Audit Manager
San Francisco, CA
Description: Hybrid in San Francisco, CA Our client is seeking an experienced IT Risk & Controls Audit Manager to lead audit, risk, and compliance initiatives within a dynamic environment. The role will evaluate technology and business controls, manage...
Date Posted: 07/29/2026 Recommended
-
Compliance Project Manager
Anywhere
Description: Remote Our client seeks a Compliance Project Manager to provide end-to-end project management supporting Regulatory Compliance. The role facilitates, supports, tracks, and reports on initiatives to ensure execution of laws and regulations,...
Date Posted: 07/29/2026 Recommended
-
Technical Product Manager
New York, NY
Description: Hybrid 4 days onsite in New York, NY Our client seeks two Technical Product Managers to drive outcomes within a high-volume retail fintech environment. One role will lead an individual pod of work. The other will provide technical oversigh...
Date Posted: 08/15/2026 Recommended
-
Senior Project Manager
Anywhere
Description: Remote Our client is seeking an experienced Senior Project Manager to lead a strategic Anti-Money Laundering (AML) technology modernization initiative. The role will manage the migration of a legacy end-of-life AML platform from an on-prem...
Date Posted: 07/29/2026 Recommended
-
Cybersecurity Operations Lead
Alexandria, VA
Description: Hybrid Hybrid, 2-3 days per week on-site in Alexandria, VA. The first 30 days of work will be full-time on-site in Alexandria, VA Our client seeks a Cybersecurity Operations Lead to provide hands-on technical leadership across cybersecurit...
Date Posted: 08/09/2026 Recommended
-
Regulatory Operations Project Manager, Global Submissions Planning/ Management
Anywhere
Description: Remote Our client seeks a Regulatory Operations Project Manager to lead global eCTD submissions planning and management for high profile molecules and lifecycle management. The role focuses on operational submission content planning for Mo...
Date Posted: 08/16/2026 Recommended
-
Regulatory Reporting & General Accounting Consultant
Lone Tree, CO
Description: On-site in either Lone Tree, CO or Omaha, NE We are seeking an experienced Regulatory Reporting & General Accounting Consultant to join the Corporate Controller's organization of our client. This team is responsible for maintaining the fin...
Date Posted: 07/30/2026 Recommended
-
Infrastructure Project Manager
Anywhere
Description: Remote Our client is seeking an Infrastructure Project Manager to support the information security function and broader infrastructure initiatives. The role will partner with stakeholders across business and technology to define scope, man...
Date Posted: 08/21/2026 Recommended
-
Senior Project Manager
Raleigh, NC
Description: Hybrid 3 on in Raleigh, NC Our client seeks a Senior Project Manager to lead multiple utility power projects across distribution and transmission. The role will manage scope, schedule, cost, risk, and stakeholder communications while apply...
Date Posted: 08/18/2026 Recommended
-
Senior Finance Transformation Consultant
Anywhere
Description: Remote Our client is building a back-office finance function following a carve-out and requires senior consultants to prepare for public company readiness. The program will focus on PMO oversight, regulatory reporting, SOX controls, and es...
Date Posted: 08/04/2026 Recommended
-
Penetration Tester
Alexandria, VA
Description: Hybrid 2-3 days per week on-site in Alexandria, VA. The first 30 days of work will be full-time on-site. in Alexandria, VA Our client seeks an experienced penetration testing professional to plan and execute comprehensive security assessme...
Date Posted: 08/11/2026 Recommended
-
Business Analyst – Government & Regulatory Programs
Stamford, CT
Description: On-site in Stamford, CT Our client seeks a Business Analyst who will partner with Regulatory, Legal, Product, Operations, UX, and Technology teams to translate government and regulatory requirements into customer-facing and agent-facing bu...
Date Posted: 07/29/2026 Recommended
-
SharePoint Migration Engineer
Pittsburgh, PA
Description: Hybrid 4 days onsite in either Pittsburgh, PA or Lake Mary, FL Our client seeks a SharePoint Migration Engineer to lead strategy and execution for a large-scale Microsoft 365 migration. The role will analyze legacy collaboration platforms,...
Date Posted: 08/12/2026 Recommended
-
Consultant, Sr. Field Clinical Engineer
Anywhere
Description: Remote Our client is a growing medical device company specializing in steerable cardiac catheters building a team of Senior Field Clinical Engineers. Operating within Clinical Development & Science in Clinical Affairs and collaborating wit...
Date Posted: 07/30/2026 Recommended
-
Lead Data Engineer
Chicago, IL
Description: Hybrid At least 2 days per week in office in Chicago, IL Our client seeks a Lead Data Engineer to design, build, and optimize large-scale data processing for attribution, measurement, forecasting, and privacy-preserving analytics. The role...
Date Posted: 08/10/2026 Recommended
-
EHR/EMR Trainer
Anywhere
Description: Remote Our client seeks an EHR Trainer to develop, maintain, and deliver general training content and documentation for healthcare software users. The role emphasizes creation and upkeep of user guides, in-app job aids, and virtual trainin...
Date Posted: 07/28/2026 Recommended
-
Service Team Specialist
Boston, MA
Description: On-site in Boston, MA Our client seeks a Service Team professional who will resolve customer requests and incidents with high standards of technical quality and customer service. The role will also support projects that address emerging te...
Date Posted: 08/09/2026 Recommended
-
Senior Accountant
King of Prussia, PA
Description: On-site in either Physical Location or Denver, PA Our client seeks an experienced accounting professional to support the Record-to-Report function with emphasis on general ledger accounting, financial reporting, regulatory reporting, and p...
Date Posted: 08/09/2026 Recommended
-
Project Manager II – Network & Infrastructure
Englewood, CO
Description: Hybrid 4 onsite in Englewood, CO Our client seeks an IT/Technology Project Manager with PMO experience, strong executive communication skills, and a track record of leading large-scale infrastructure, telecom, or enterprise technology proj...
Date Posted: 08/15/2026 Recommended
-
Change Management Senior Consultant
Charlotte, NC
Description: Hybrid 2 Days onsite in Charlotte, NC Our client seeks a Senior Change Management Consultant to support change efforts tied to acquisitions and technology integrations. The role partners with M&A teams, IT, business leaders, and security t...
Date Posted: 08/20/2026 Recommended
-
Senior PMO and Finance Controls Consultants
Anywhere
Description:Remote Our client is standing up a back-office finance function as part of a Phase 2 effort to prepare for public company readiness following a carve-out. The team seeks one senior PMO leader and four senior finance controls and reporting r...
Date Posted: 08/04/2026 Recommended
-
Email Cyber Security Engineer
Rockville, MD
Description: Hybrid 3 days onsite / 2 days remote in either Rockville, MD or Tysons Corner, VA Our client seeks a Security Engineer responsible for designing, implementing, and maintaining controls that protect enterprise systems and data from unauthor...
Date Posted: 07/28/2026 Recommended
-
Project Manager / Strategic Sourcing
Pittsburgh, PA
Description:Hybrid 4 days onsite in Pittsburgh, PA Our client seeks a Project Manager / Strategic Sourcing professional to lead sourcing and contracting for corporate real estate construction and office renovation projects. The role will run end-to-end...
Date Posted: 07/28/2026 Recommended
-
Agentic AI, AI & Data Science Engineer
Aberdeen Proving Ground, MD
Description: On-site in Aberdeen Proving Ground, MD Our client seeks an Agentic AI, AI & Data Science Engineer to develop mission-focused AI/ML solutions, automation workflows, analytics capabilities, and agent-based systems that support Army readiness...
Date Posted: 08/10/2026 Recommended
Eliassen Group is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status. Eliassen Group’s Affirmative Action Plan (AAP) is available for inspection by any employee or applicant for employment upon request, during normal business hours of Monday through Friday, 8:30am to 5:30pm EST. Interested persons should contact Phaedra Wells at pwells@eliassen.com for assistance. It is unlawful in Massachusetts and Maryland to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.
Applicants with disabilities that believe they require an accommodation or assistance with a position, please email our HR team at hradmin@eliassen.com. This email inbox is designed exclusively to assist job seekers whose disability prevents them from being able to apply online. Emails sent for other purposes will not receive a response.
Please be advised that a number of fraudulent job postings have been released under the Eliassen Group brand.
Unfortunately, fraudulent job postings can happen. If anyone reaches out to you about an open position connected with Eliassen Group, never provide personal or financial information to anyone who is not clearly associated with Eliassen Group
If anyone seemingly from Eliassen Group has ever requested this personal information in the past or does so in the future, please contact fraud@eliassen.com.
Please ensure that you are working directly with us by confirming the following:
- When you work with Eliassen Group, all email communication will come from an Eliassen.com address, never Gmail, Yahoo, etc.
- Eliassen Group will never ask you for personal information (home address, bank account, or check routing number) until you have worked with someone clearly associated with Eliassen Group, as indicated above