Cyber GRC Analyst at SAIC

United States

<p>SAIC is looking for a Quality Assurance and Governance Analyst. This role combines responsibilities for analyst and ticket quality with a strong focus on technical QA and governance. The position is designed as a blended role, bridging Quality Assurance (QA) processes with Governance, Risk, and Compliance (GRC), while expanding beyond traditional Tier 1 ticket reviews. The successful candidate will act as a quality and control layer between Tier 0 automation, Tier 1 analysts, Engineering, and GRC stakeholders. They will provide hands-on experience in workflow design, access and control decisions, testing, integrations, governance practices, and technical documentation, while helping to maintain the highest levels of automation and analyst performance quality within the Security Operations Center (SOC). <strong>This opportunity can be worked 100% remote for the right candidate.</strong></p><p><span>&nbsp;</span></p><p>Responsibilities&nbsp;</p><p><strong>Governance, Risk, and Compliance:</strong></p><ul style="list-style-type: disc;"><li>Perform governance and oversight functions in accordance with NIST Risk Management practices outlined in 800-39.</li><li>Support AI governance and oversight by establishing rigorous testing, approval, documentation, and periodic review processes for GenAI-supported workflows. Key focus areas include accuracy, traceability, hallucination risk, data handling, and human-in-the-loop requirements.</li><li>Maintain detailed control documentation, including testing evidence, workflow approvals, QA standards, and change records to support internal governance and compliance assessments (e.g., NIST, FedRAMP, CJIS, or CMMC frameworks).</li><li>Participate in policy analysis and contribute to the development and refinement of security, technical, and AI governance policies.</li><li>Technical QA and Workflow Assessment:</li><li>Conduct Tier 0 and automation quality assurance, validating Torq workflows, decision points, enrichment steps, outputs, escalation logic, and ticket creation to ensure automation is functioning as intended.</li><li>Perform technical workflow testing, including user acceptance testing (UAT) and regression testing related to updates in Torq workflows, playbooks, integrations, or Sentinel rules.</li><li>Analyze and address exceptions and failures in automated workflows to determine root causes, collaborating with Engineering to identify whether issues stem from logic errors, data quality gaps, integration failures, or analyst handling.</li><li>Develop QA metrics to identify and delineate analyst quality issues versus automation quality issues, providing data-driven insights into Tier 0 performance, consistency, and contribution to SLA adherence.</li><li>Conduct regular reviews and evaluations of analyst investigations and ticket handling to ensure they meet defined QA standards and provide feedback to continuously improve performance.</li></ul><p><strong>Continuous Improvement:</strong></p><ul style="list-style-type: disc;"><li>Use QA findings to recommend updates and improvements to playbooks, Torq workflows, automation rules, escalation criteria, and technical controls. Focus on preemptive improvement rather than solely identifying gaps after implementation.</li><li>Communication and Collaboration:</li><li>Facilitate communication and collaboration among Tier 0 automation systems, Tier 1 analysts, Engineering teams, and Governance, Risk, and Compliance stakeholders to align work outcomes with organizational objectives.</li><li>Act as the key point of coordination for QA and technical review discussions, ensuring integration across all stakeholders and establishing a unified path toward continuous improvement.</li></ul> <br><a href="http://www.saic.com/" target="_blank" rel="nofollow">SAIC®</a>&nbsp;is a premier mission integrator focused on advancing the power of technology and innovation to serve and protect our world. Our robust portfolio of offerings across the defense, space, intelligence, and civilian markets includes secure high-end solutions in mission IT, enterprise IT, engineering services, and professional services. We integrate emerging technology, rapidly and securely, into mission critical operations that modernize and enable critical national imperatives. <div> <br> We are approximately 23,000 strong; driven by mission, united by purpose, and inspired by opportunities. SAIC is an Equal Opportunity Employer. Headquartered in Reston, Virginia, SAIC has annual revenues of approximately $7.3 billion. For more information, visit&nbsp;<a href="http://www.saic.com/" target="_blank" rel="nofollow">saic.com</a>. For ongoing news, please visit our&nbsp;<a href="http://www.saic.com/who-we-are/newsroom/" target="_blank" style="margin-bottom:0px" rel="nofollow">newsroom</a>. </div>