GRC Analyst

Job Summary

A company is looking for a GRC Analyst to support the development, implementation, and maintenance of security controls and regulatory compliance.

Key Responsibilities

• Assist in the development and maintenance of security and compliance policies and procedures
• Support internal and external audits and track alignment of controls with industry frameworks
• Conduct vendor risk assessments and monitor third-party compliance with regulatory obligations

Required Qualifications, Training, and Education

• B.S. or equivalent in Computer Science, Information Science & Technology, or related field
• At least three years of experience in Governance, Risk, and Compliance work
• Experience in HIPAA, HITECH, and SOC 2 compliance environments
• Familiarity with GRC platforms, such as Drata, and industry frameworks like NIST SP 800 series
• Security certifications are highly desired