Lead Cybersecurity Program Analyst

Kurv is advancing its cybersecurity program in alignment with the NIST Cybersecurity Framework while supporting and strengthening its existing PCI DSS 4.0 program. The Lead Cybersecurity Program Analyst will support both cybersecurity program development and day-to-day security operations, focusing on asset inventory, ownership, and risk classification.

What you'll do:

• Build and maintain enterprise asset inventory (systems, applications, vendors, data flows)
• Document system ownership, classification, and risk tiering
• Support ongoing PCI scope validation and data flow documentation
• Support mapping and alignment of existing controls to NIST CSF and PCI DSS 4.0
• Assist in maintaining cybersecurity policies, standards, and documentation
• Track updates to the cybersecurity risk register and governance activities
• Contribute to reporting, metrics, and audit readiness
• Support execution of core security controls, including:
• Vulnerability scanning and remediation tracking
• Log monitoring and alert review
• File integrity and change validation
• Identify and escalate anomalies or control gaps

What they're looking for:

• Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Risk Management, or related field
• Strong analytical, organizational, and documentation skills
• High attention to detail and accountability
• Clear written and verbal communication skills
• Interest in cybersecurity governance, risk, and compliance
• Exposure to NIST, PCI DSS, SOC 2, or ISO 27001
• Familiarity with cloud environments (AWS preferred)
• Entry-level certification (or willingness to obtain) such as Security+

Benefits:

• Mentorship from senior team members
• Exposure to real-world PCI and cloud security environments
• Kurv supports development in: NIST Cybersecurity Framework
• Kurv supports development in: PCI DSS fundamentals
• Kurv supports development in: Foundational cybersecurity certifications (e.g., Security+)
• Kurv supports development in: Governance, Risk, and Compliance (GRC) career path