GRC Analyst

Job Summary

To support the ongoing maturity of the Governance, Risk, and Compliance program, the full-time remote GRC Analyst will monitor compliance, respond to RFPs and security questionnaires, and manage third-party risk assessments.

Key responsibilities

• Monitor organizational compliance with internal policies and external regulations, preparing regular compliance status reports for leadership
• Respond to customer RFPs and security/vendor questionnaires, coordinating with subject matter experts for accurate and timely responses
• Support the third-party risk management program, including vendor security assessments and ongoing monitoring of vendor risk

Required qualifications

• Bachelor's degree in Information Security, Computer Science, Business, or related field (or equivalent experience)
• 4+ years of experience in GRC, IT audit, information security, or a related compliance role
• Working knowledge of SOC 2, ISO 27001, and DORA requirements
• Experience with risk register tools, Trust Centers, GRC platforms, and ticketing systems
• Excellent written communication skills for policy drafting and compliance reporting