Mid-Level GRC Analyst

Job Summary

Operating in a hybrid work model, the full-time Mid-Level GRC Analyst will lead internal audits, enhance the GRC platform, and partner with cross-functional teams to manage compliance and risk effectively.

Key responsibilities

• Lead and execute internal audits across business units, ensuring alignment with compliance frameworks like ISO 27001 and SOC 2
• Maintain and enhance the GRC platform to track controls, risks, and remediation activities
• Partner with IT, Security, and Operations teams to assess risks in new projects, vendors, and technologies

Required qualifications

• 3-5 years of experience in governance, risk, and compliance, preferably in a technology-driven or regulated industry
• Hands-on experience with GRC tools such as Archer or ServiceNow GRC
• Familiarity with compliance frameworks including ISO 27001, SOC 2, and HIPAA
• Strong analytical skills with the ability to translate complex regulations into actionable controls
• Proactive and detail-oriented mindset with a passion for building secure and compliant business practices