GRC Analyst II

Job Summary

Working remotely in a full-time capacity, the GRC Analyst II will manage client engagements focused on IT controls, security, and compliance, while evaluating and documenting key business processes and controls across SOC engagements.

Key Responsibilities

• Conduct detailed external audits of clients' business processes and IT controls to ensure compliance with industry standards
• Evaluate and test application controls, including automated controls across various client systems
• Develop strong client relationships to gain insights into their business risks and compliance needs

Required Qualifications

• Bachelor's degree in Cybersecurity, Information Systems, or a related field
• 1+ years of experience in governance, risk management, compliance, or related professional services roles
• Experience conducting SOC 1/2 audits
• Relevant professional designation such as CISA or CISSP is a plus
• Familiarity with SOC readiness platforms like Drata or Vanta is preferred