GRC Analyst

This is a fully remote position, open to applicants in Mexico.

📋 Description

• Provide daily Governance, Risk, and Compliance (GRC) services.

• Emphasize operational execution, coordination, and reporting across compliance, security assurance, and governance activities.

• Accountable for client audits, gathering evidence, managing compliance tools, and supporting security questionnaires.

• Supervise security controls and promote regulatory alignment.

• Manage ongoing governance activities across the Atmosera client portfolio.

• Work within established service hours (Monday–Friday, 8am–5pm PT).

⛳️ Requirements

• Minimum of 2 years of experience in GRC, IT risk, compliance, or security operations support.

• Practical experience with Microsoft Purview Compliance Manager, including control mapping, evidence tasks, and regulatory templates.

• Knowledge of Defender for Cloud, focusing on secure score, recommendations, and compliance dashboards.

• Experience with Azure Policy concepts, including assignments, compliance scanning, and configuring remediation tasks.

• Understanding of NIST frameworks.

• Familiarity with SOC 2 concepts.

• Knowledge of CIS Controls.

• Understanding of HIPAA compliance.

• Excellent documentation, evidence collection, and organizational skills.

• Capability to manage multiple client workstreams concurrently.

• Strong public speaking and presentation skills with Microsoft PowerPoint.

• SC-900 Microsoft Certified: Security, Compliance, and Identity Fundamentals – to be achieved within 90 days of hire.

🏝️ Benefits

• Health insurance.

• Career development opportunities.

• Paid time off.

• Work-life balance.