GRC Analyst

Job Summary

Executing governance, risk, and compliance activities, the full-time GRC Analyst will monitor adherence to regulatory requirements, conduct assessments, and manage control evidence while working remotely.

Key responsibilities

• Administers ongoing third-party vendor risk assessments in line with NIST and organizational TPRM policies
• Reviews vendor SOC reports, security attestations, and compliance certifications to evaluate security posture
• Tracks exceptions and assists system owners in developing and monitoring remediation plans based on assessment findings

Required qualifications

• Bachelor's degree from an accredited college or university, or equivalent experience in IT systems and networks
• One year of experience in Third Party Risk Management, GRC, or supporting enterprise security/compliance programs
• Ability to obtain a professional security certification within one year of employment