Cybersecurity Program Analyst

Kurv is advancing its cybersecurity program in alignment with the NIST Cybersecurity Framework while supporting and strengthening their existing PCI DSS 4.0 program. They are seeking a motivated, detail-oriented Cybersecurity Program Analyst to support both cybersecurity program development and day-to-day security operations.

What you'll do:

• Build and maintain enterprise asset inventory (systems, applications, vendors, data flows)
• Document system ownership, classification, and risk tiering
• Support ongoing PCI scope validation and data flow documentation
• Support mapping and alignment of existing controls to NIST CSF and PCI DSS 4.0
• Assist in maintaining cybersecurity policies, standards, and documentation
• Track updates to the cybersecurity risk register and governance activities
• Contribute to reporting, metrics, and audit readiness
• Support execution of core security controls, including:
• Vulnerability scanning and remediation tracking
• Log monitoring and alert review
• File integrity and change validation
• Identify and escalate anomalies or control gaps

What they're looking for:

• Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Risk Management, or related field
• Strong analytical, organizational, and documentation skills
• High attention to detail and accountability
• Clear written and verbal communication skills
• Interest in cybersecurity governance, risk, and compliance
• Exposure to NIST, PCI DSS, SOC 2, or ISO 27001
• Familiarity with cloud environments (AWS preferred)
• Entry-level certification (or willingness to obtain) such as Security+