About the Role
We are looking for a GRC Analyst to support our Governance, Risk, and Compliance initiatives. This role is ideal for someone with a strong interest in cybersecurity, risk management, compliance, and information security who wants to build or advance their career in GRC.
The GRC Analyst will work closely with security, IT, audit, and business teams to support risk assessments, compliance activities, security documentation, audits, and ongoing monitoring of security controls.
Key Responsibilities
Support Governance, Risk, and Compliance (GRC) activities across the organization.
Assist with risk assessments, security assessments, and control evaluations.
Maintain and update security policies, procedures, standards, and compliance documentation.
Support internal and external security audits and compliance assessments.
Collect, review, and organize evidence for audits and regulatory requirements.
Track remediation activities and follow up on outstanding security findings.
Assist with third-party/vendor risk assessments and security questionnaires.
Monitor compliance with security policies, controls, and regulatory requirements.
Maintain risk registers, compliance trackers, and control documentation.
Help prepare reports and dashboards related to security risks, compliance status, and audit findings.
Work with IT and security teams to identify control gaps and document remediation plans.
Support compliance initiatives related to frameworks such as NIST, ISO 27001, SOC 2, PCI DSS, HIPAA, or similar standards.
Stay current with changes in cybersecurity regulations, industry standards, and compliance requirements.
Required Qualifications
1–4 years of experience in GRC, cybersecurity, IT audit, information security, risk management, or compliance.
Strong understanding of basic cybersecurity and information security concepts.
Familiarity with security frameworks such as NIST CSF, NIST 800-53, ISO 27001, SOC 2, CIS Controls, or similar.
Experience with documentation, evidence collection, compliance tracking, or audit support.
Strong analytical and problem-solving skills.
Excellent written and verbal communication skills.
Ability to work with technical and non-technical stakeholders.
Strong attention to detail and organizational skills.
Proficiency with Microsoft Excel, Word, PowerPoint, and/or Google Workspace.
Preferred Qualifications
Experience with GRC platforms such as ServiceNow GRC, Archer, RSA, OneTrust, LogicGate, AuditBoard, Drata, Vanta, or similar tools.
Knowledge of third-party/vendor risk management.
Exposure to SOC 2, ISO 27001, PCI DSS, HIPAA, SOX, or other compliance requirements.
Experience supporting internal or external audits.
Familiarity with cloud security concepts, particularly AWS, Azure, or GCP.
Certifications such as Security+, CISA, CRISC, CGRC, ISO 27001, or similar are a plus.
