Job Details

This role requires candidates who are currently authorized to work in the U.S. without sponsorship, and C2C arrangements are not accepted. This role is hybrid in Plano, Texas.

Job Summary
The Senior Security & Governance Analyst supports the development, implementation, and ongoing refinement of technology policies, standards, and governance practices across the organization. This role focuses on ensuring alignment with industry frameworks, maintaining compliance with applicable requirements, and reducing risk through effective oversight and documentation. The analyst works cross-functionally to translate complex technical information into clear guidelines and to drive continuous improvement in the security governance program.

Key Responsibilities
Policy & Standards Management

• Develop, update, and maintain cybersecurity and IT policies, standards, and procedures.
• Ensure all documentation remains accurate, up-to-date, and aligned with current threats, technologies, and regulatory expectations.
• Benchmark internal policies against recognized frameworks and best practices to identify gaps and improvement opportunities.

• Support governance activities such as policy reviews, compliance validation, and internal readiness checks.
• Conduct risk assessments, gap analyses, and control evaluations to determine effectiveness and identify remediation needs.
• Assist with audits by providing documentation, tracking findings, and monitoring remediation progress.

• Partner with technical teams, legal, compliance, and business units to ensure policies support organizational needs.
• Communicate policy updates and governance requirements in clear, user-friendly language.
• Provide guidance on interpreting standards and implementing appropriate controls.

• Analyze audit results, incidents, and performance metrics to strengthen governance practices.
• Maintain centralized records of policies, assessments, and governance activities.
• Prepare reports and dashboards using standard data analysis tools.

• Monitor emerging threats, regulatory developments, and industry trends to inform updates to policies and governance frameworks.
• Identify opportunities to improve policy management processes, control effectiveness, and overall security posture.

• Bachelor's degree in Information Security, Computer Science, Information Technology, or a related field (preferred).
• 6+ years of experience in cybersecurity governance, risk, compliance, or policy management.
• Hands-on experience with GRC platforms (e.g., ServiceNow, Archer, OneTrust, or similar).
• Proficiency with data/reporting tools such as Excel or BI platforms.
• Professional certifications (e.g., CISM, CISA, CISSP, or similar) are a plus.