GRC Analyst

Job Summary

Seeking a detail-oriented GRC Analyst, this remote-friendly full-time position will manage GRC workstreams, conduct risk assessments, and ensure audit readiness while collaborating with various teams to enhance security controls and compliance processes.

Key responsibilities:

• Take ownership of GRC workstreams from initial request through evidence collection and completion
• Conduct risk assessments and develop effective remediation plans for identified gaps
• Test security controls to verify their effectiveness beyond mere documentation compliance

Required qualifications:

• Experience in security, compliance, risk, audit, or vendor risk evaluation
• Familiarity with SOC 2, NIST CSF, or similar security and compliance frameworks
• Strong writing skills to translate complex requirements into clear actions
• Ability to operate in a dynamic environment with changing processes
• Proven organizational skills to manage multiple workstreams and meet deadlines