About Goosehead Since 2003, Goosehead Insurance has been disrupting the insurance industry by giving clients the power of choice, utilizing a smarter marketing approach, and delivering world-class service. This is all powered by our focus on hiring and retaining extraordinary people. Our clients trust us with their most valuable possessions, so we’re more than just a bit selective when it comes to hiring new team members. Job Summary We are seeking a Cybersecurity Analyst who's experience will be pivotal in protecting the company’s data, systems, and infrastructure. The analyst will be responsible for assessing security controls, managing vendor risk, and collaborating with internal teams to ensure compliance with regulatory requirements. Principal Duties and Responsibilities: Monitor, analyze security alerts and from various tools (e.g., SIEM, EDR, firewalls, network traffic) to detect intrusions, malware, or anomalous activity. Perform in-depth investigations of security incidents to determine root cause, identify IOAs and IOCs and recommend remediation steps. Respond to and mitigate cybersecurity incidents containment, eradication, and recovery efforts. Conduct vulnerability assessments, oversee penetration testing support, and risk evaluations to identify and prioritize threats. Collaborate with cross-functional teams (IT, legal, HR, audit, DevSecOps) on security projects, awareness training, threat intelligence, and GRC initiatives. Stay current on evolving cyber threats, tools, regulatory landscapes, and best practices; contribute to continuous improvement of the security and compliance posture. Monitor and report on cybersecurity metrics, prepare detailed reports on security events and posture. Develop, review, and maintain cybersecurity procedures, playbooks, standards and policies aligned with industry frameworks (e.g., NIST, ISO 27001, CIS Controls) and regulatory requirements. Support Governance, Risk, and Compliance (GRC) activities, including conducting risk assessments, maintaining the risk register, performing gap analyses against compliance standards (e.g., SOC 2, PCI DSS, HIPAA, GDPR, CCPA), and tracking mitigation plans. Assist with internal and external compliance audits, evidence collection, vendor risk assessments, and remediation of identified findings to ensure ongoing adherence to regulations and organizational policies, GRC status, and metrics for management and audit purposes. Experience and Education Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field (or equivalent experience/certifications). Certifications such as CompTIA Security+, CySA+, CEH, GIAC, CISA, CRISC, or CISSP highly preferred. Required Skills and Abilities 2–5+ years of experience in cybersecurity, IT security, or related roles (experience with GRC/compliance activities is a plus). Proficiency with security tools (SIEM, vulnerability scanners, endpoint protection) and understanding of frameworks like NIST, MITRE ATT&CK, and common GRC standards. Soft Skills Strong problem-solving, analytical, communication, and documentation skills. Curiosity and initiative to research unfamiliar issues, troubleshoot independently. Ability to take ownership of assigned work, communicate progress and blockers, and follow through to completion. Collaborative approach to problem-solving knowledge sharing, welcoming feedback, and respectfully considering different perspectives and alternative solutions. Benefits Summary High-quality voluntary health, vision, disability, life, and dental insurance programs 401K Matching Plan Employee Stock Purchase Plan Paid holidays, vacation, and sick leave Corporate-sponsored programs to enhance employee physical, financial, mental, and emotional wellness, Financial Solution Program Equal Employment Opportunity: Goosehead is an equal-opportunity employer and complies with all applicable federal, state, and local laws, rules, guidelines, and regulations. Goosehead strictly prohibits and does not tolerate unlawful discrimination against employees, applicants, or any other covered person because of race, color, religion, creed, national origin, ancestry, ethnicity, sex (including pregnancy, childbirth, and related medical conditions), sexual orientation, gender, gender identity, transgender status, age, physical or mental disability, veteran status, uniformed service, genetic information, or any other characteristic protected by applicable law. All applicants for employment and all Goosehead employees are given equal consideration based solely on job-related factors, such as qualifications, experience, performance, and availability. To learn more about our job opportunities, apply here. We look forward to speaking with you! Since 2003, Goosehead has been changing the face of the insurance industry and making the search for great coverage a piece of cake. We’re committed to finding the best policies and rates, and that starts with our team. Our people are smart, inclusive, hungry for success, and strive everyday to win. There is noble purpose in all our efforts. The work we do matters. Not only are we fixing a broken industry, we get to win professionally and financially while doing it. If you think you have what it takes to grow with our company, we would love to meet you. Not finding the right fit? Let us know you're interested in a future opportunity by clicking Get Started below or create an account by clicking 'Sign In' at the top of the page to set up email alerts as new job postings become available that meet your interest!

Cyber Analyst.

more at Goosehead.

Compliance Analyst

Enterprise Sales Agent (Inside Sales)

Account Executive - The Whitehead and Bell Agency

similar roles.

Corporate Communications Manager

Brand Marketeer-stagiair(e)

Sales Brand Activatie Stagiair(e) Zuid

Strategic Product Marketing Manager

Director, Sales

Conversion Rate Optimization Specialist