Information Security Grc Analyst 3

h3Information Security GRC Analyst 3 /h3 pSalary: €104,Visualizzare il telefono su click.jobroute.io,479 yearly /p pAzienda: Ulabr/Tipo Lavoro: Full Time Italy /p h3Descrizione Lavoro - Information Security GRC Analyst 3 /h3 pbRequisition ID: /b1839 /p pbStandard Weekly Hours: /b40.00 /p pbLocation: /bULA - Denver, ULA - Cape Canaveral, ULA - Decatur, ULA - Vandenberg AFB /p pbRelocation: /bYes- Relocation may be available /p pbTravel Requirements: /b10% /p pbAt ULA, success comes through the efforts of a strong, united team. /b /p pThanks for your interest in United Launch Alliance, the world's most experienced and reliable space launch company! Successfully launching more than 155 consecutive missions with 100% mission success doesn't happen by accident. It's a testament to the commitment and dedication of our team of rocket scientists and support employees combined with the systems and processes we use to pull them together. As a ULA employee, you'll have the opportunity to grow in your career while working in a team-oriented culture that combines technology, innovation, ingenuity and a commitment to the extraordinary. Whether you are in college just launching your career, or, have experience and want to come work with the best rocket team in the world, our unshakable unity yields stronger solutions and better results as we carry out our mission to save lives, explore the universe, and connect the world. Our team is excited to meet you! /p h3Job Overview Responsibilities /h3 pAt ULA, bInformation Security GRC Analyst 3 /b plays a critical role in supporting cybersecurity, assurance, and compliance activities for mission‑focused Aerospace and Defense programs. This role ensures the organization maintains compliance with multiple U.S. government and commercial cybersecurity frameworks—such as CNSSI 1253, NIST SP 800‑171, NIST SP 800‑172, and ISO/IEC 27001:2022—while enabling secure, resilient, and efficient operations across unclassified environments. /p pThis mid‑career position is ideal for an analytical, detail‑oriented professional with a solid grounding in risk management, cybersecurity controls, and compliance operations who is ready to take ownership of significant program responsibilities. /p pbKey Responsibilities /b /p ul liSupport governance, risk, and compliance activities across unclassified AD programs. /li liTranslate framework requirements (CNSSI 1253, NIST Visualizzare il telefono su click.jobroute.io, ISO 27001:2022) into actionable technical and procedural controls. /li liAssist with developing, maintaining, and improving System Security Plans (SSPs), POAMs, risk registers, and related artifacts. /li liParticipate in system categorization, control inheritance, and continuous monitoring activities for information systems and enclaves. /li liConduct risk assessments, document findings, and work with engineering and operations teams to define mitigation strategies. /li liSupport internal and external audits, customer assessments, and inspection readiness activities. /li liContribute to policy and procedure development and ensure alignment to regulatory, contractual, and corporate requirements. /li liMonitor changes in U.S. government cybersecurity policy, DoD directives, and commercial standards; assess impact to internal environments. /li liAssist with incident response processes from a compliance and documentation perspective. /li liProvide GRC guidance to project teams and stakeholders while maintaining a strong customer‑service orientation. /li /ul pbRequired Education /b /p pBachelor /p pbRequired Years of Experience /b /p pMinimum of 4 years of related work experience /p pbBasic Qualifications /b /p ul liBachelor's degree in a STEM (Science, Technology, Engineering, Mathematics) field from an accredited college or universityul liFour years of directly related exempt work experience may be used to satisfy the bachelor’s degree requirement /li /ul /li liWorking knowledge of at least two of the following frameworks: CNSSI 1253, NIST SP 800‑53, NIST SP Visualizzare il telefono su click.jobroute.io, ISO/IEC 27001:2022 /li liExperience supporting compliance in regulated or defense‑aligned environments (DoD, IC, AD contractors, or similar) /li liStrong analytical, documentation, and communication skills /li /ul pbPreferred Qualifications /b /p ul liExperience with Risk Management Framework (RMF) authorization packages or audits /li liUnderstanding of Zero Trust principles and enhanced cybersecurity requirements under 800‑172 /li liProfessional certifications such as Security+, CySA+, CISM, CISSP, CCP, or CCA preferred /li liExperience working with cross‑functional engineering, IT, and programming teams in high‑security environments /li liPrior experience with DFARS/CMMC compliance preferred /li /ul pbSummary Salary Range (for ULA - Denver, ULA - Cape Canaveral, ULA - Decatur, ULA - Vandenberg AFB only): /b $104,087.00 - $173,479.00 /p pPlease note that the salary information shown above is a general guideline only. Salaries are based upon a candidate's experience and qualifications, as well as internal equity, market and business considerations. Employees may be eligible for a discretionary annual bonus in addition to base pay. /p pbWhat makes ULA different? /b /p pBecause we understand launch success comes through the collective efforts of a team, we seek the best to join us. We value ethics, ingenuity, engagement and professional development for employees at all levels. /p pWe offer our employees competitive pay and benefits including: /p ul li401(k) match plus an additional employer contribution /li liDiscretionary annual incentive bonus for eligible employees /li liGenerous paid time off /li liFlexible work environments /li /ul pAdditionally, most salaried ULA team members work a "9/80 schedule," meaning they enjoy every other Friday off. /p pBenefits and work schedules may vary for union‑represented hourly positions and are described in the applicable collective bargaining agreement. /p pThe application period for the job is estimated to be 20 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates. /p pbSecurity Clearance / International Traffic In Arms Regulations (ITAR). /b This position requires use of information which is subject to the International Traffic In Arms Regulations (ITAR). Therefore, all applicants must be U.S. Persons as defined in ITAR 22 CFR 120.62 (e.g., U.S. Citizen, Lawful Permanent Resident (Green Card holder) or protected individual. See 8 U.S.C. 1101(a)(20) and 8 U.S.C. 1324b(a)(3) for additional information. /p pbULA is an Equal Opportunity Employer. /b All qualified applicants will receive consideration for employment. /p pbULA is a participant in the federal E-Verify Program. /bPosters in PDF format pertaining to this program can be accessed by clicking on the links identified below. E-Verify Participation poster ( English / Spanish ) and Right to Work Poster ( English / Spanish ). /p pbColorado Equal Pay for Equal Work Act /b requires covered employees to follow a post selection notification process. A hired candidate may opt out of this process by notifying the hiring manager in writing at the time the offer is accepted /p #J-18808-Ljbffr