Information Security GRC Analyst

Job Summary

Serving as a primary coordinator for customer security inquiries, the full-time remote Information Security GRC Analyst will manage client security questionnaires, support internal audits, and ensure compliance with regulatory requirements while collaborating with various internal teams.

Key responsibilities

• Serve as the primary intake point for client security due diligence, managing requests and drafting responses using approved policies and standards
• Collect and organize supporting evidence for security assessments, ensuring accuracy and confidentiality before release
• Track client-identified findings and support internal technology audits by coordinating evidence requests and documenting results

Required qualifications

• Bachelor's or Associate degree in Risk Management, Information Systems, Cybersecurity, Finance, Legal Studies, or a related field, or equivalent experience
• 2-4 years of relevant experience in information security compliance, client assurance, or governance, risk, and compliance (GRC)
• Hands-on experience with security questionnaires and client audits, including maintaining trackers and following up on items
• Working knowledge of information security domains such as IAM, vulnerability management, and cloud security
• Familiarity with common security frameworks like SOC 2, ISO 27001, and NIST CSF