GRC Analyst

Job Summary

To support a growing Security & Compliance team, the full-time remote GRC Analyst will manage and enhance GRC functions, including risk assessments, compliance programs, and internal audits, while collaborating across departments to ensure effective remediation and sustainable processes.

Key responsibilities

• Operate and improve GRC and security compliance programs, supporting frameworks such as SOC 2 and ISO 27001
• Coordinate audit and compliance evidence collection from various departments and translate compliance requirements into actionable tasks
• Perform control assessments and risk analyses, recommending remediation plans and tracking vulnerabilities through resolution

Required qualifications

• 3 to 5 years of experience in GRC, cybersecurity, risk management, compliance, or audit
• Familiarity with NIST 800-53, SOC 2, ISO 27001, or similar frameworks
• Experience supporting audits, assessments, and evidence collection
• Demonstrated use of technology to improve GRC processes, including automation and workflow management
• Technical fluency to collaborate effectively with Engineering, IT, and Security teams