Information Security GRC Analyst

Job Summary

A company is looking for an Information Security GRC Analyst to support clients in developing governance, risk, and compliance programs.

Key Responsibilities

• Assist in the development and assessment of information security policies and procedures aligned with regulatory compliance
• Conduct risk assessments and control evaluations across various client engagements
• Support audit readiness activities and maintain GRC tooling and platforms for client compliance management

Required Qualifications, Training, and Education

• 1-2 years of experience in GRC, cybersecurity, IT audit, or a related discipline
• Foundational knowledge of security frameworks such as NIST CSF or ISO 27001
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Business, or a related field (preferred)
• Relevant certifications or progress toward certifications like CompTIA Security+, CISA, or CRISC (preferred)
• Experience with cloud environments and associated compliance considerations (preferred)