GRC Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Assist in governance, risk management, compliance, and client assurance initiatives.

• Act as the main point of contact for security questionnaires, due diligence requests, RFP security sections, SOC reports, bridge letters, penetration-test summaries, and related documentation.

• Analyze client security questionnaire requirements and deliver precise responses in line with company policies and security practices.

• Collaborate with Sales, Client Experience, Legal, Product, and Information Security teams on customer security inquiries.

• Utilize approved security questionnaire and AI-driven response tools to generate and enhance responses.

• Create, maintain, and enhance reusable security response content and documentation.

• Facilitate SOC 2 and other audits by managing evidence requests and assisting with control documentation.

• Gather and preserve audit-ready compliance evidence.

• Aid in security framework, internal control, and regulatory compliance processes.

• Monitor remediation actions and collaborate with stakeholders to resolve issues.

• Conduct regular User Access Reviews for critical systems and applications.

• Coordinate access validation with system owners and managers based on least-privilege principles.

• Maintain evidence and track remediation from access reviews.

• Assist in the review and negotiation of customer security addenda, contract language, and redlined security requirements.

• Collaborate with Legal and Information Security on contractual obligations and amendments.

• Provide guidance to internal business teams on security controls, compliance requirements, and customer assurance.

• Enhance GRC processes, documentation, automation, and reporting.

• Engage in governance and risk initiatives and broader program enhancement activities.

⛳️ Requirements

• A Bachelor's degree in Cybersecurity, Information Systems, Business Administration, Risk Management, Accounting, or a related field, or an equivalent combination of education and work experience.

• A minimum of two (2) years of experience in information security, IT audit, GRC, security compliance, client assurance, or a similar discipline.

• Proficient knowledge of SOC 2, access management, least privilege, segregation of duties, disaster recovery, data protection, security testing, and controls.

• Experience in interpreting questionnaires, collecting stakeholder information, and preparing accurate professional responses.

• Strong written communication skills suitable for both technical and non-technical audiences.

• Excellent attention to detail and capability to manage multiple priorities and deadlines.

• Strong organizational, documentation, and follow-up skills.

• Initiative, accountability, and a readiness to learn new technologies, products, and security requirements.

• Solid analytical and problem-solving abilities.

• Ability to handle multiple projects and deadlines in a fast-paced setting.

• Excellent interpersonal and collaboration skills.

• Ability to maintain confidentiality and exercise sound judgment with sensitive information.

• Strong proficiency in Microsoft Word, Excel, PowerPoint, and Teams.

• Capability to work independently while collaborating across departments.

• Minimal travel may be required.

🏝️ Benefits

• Comprehensive health, dental, and vision plans.

• Performance-based incentives for most roles.

• Remote-first, office-friendly environment.

• Employer-sponsored retirement savings programs.

• Opportunities for professional development, training, and resources for career growth.

• Supportive and collaborative culture.

• Resources for mental health, financial planning, and wellness.

• Minimal travel may be required.