GRC Analyst

Overview

The GRC Analyst supports governance, risk management, and compliance programs, including security risk assessment, audit coordination, and control assurance.

What you'll do

• Assess security risks.
• Monitor compliance with internal policies and external regulations.
• Coordinate audits and support evidence collection and control validation.
• Track remediation activities.
• Ensure appropriate controls are in place to protect business information and technology assets.
• Manage risk registers, control matrices, and corrective action plans.
• Conduct third-party/vendor security risk assessments and review supplier compliance documentation.

What you'll need

• Experience in GRC, information security, IT risk management, or cybersecurity compliance roles.
• Hands-on experience performing security risk assessments, control assessments, compliance, and Privacy reviews.
• Experience with security frameworks/standards such as ISO 27001, NIST CSF, SOC 2, PCI DSS, or GDPR.
• Experience supporting internal and external audits, including evidence collection, control validation, and remediation tracking.
• Experience developing, reviewing, and maintaining security policies, standards, procedures, and compliance documentation.
• Experience managing risk registers, control matrices, audit findings, and corrective action plans.
• Experience conducting third-party/vendor security risk assessments and reviewing supplier compliance documentation.