Junior Governance, Risk & Compliance Analyst

This is a fully remote position, open to applicants in Iowa.

📋 Description

• Assist in identifying, evaluating, and monitoring risks within IT and enterprise functions.

• Aid in the upkeep of the enterprise risk register and dashboards utilized by leadership.

• Support the drafting, organization, and maintenance of policies, standards, and procedures.

• Assist in compliance awareness initiatives and training that foster a culture of risk accountability.

• Learn and contribute to mapping controls to frameworks such as NIST CSF, COBIT 2019, and ISO 27001.

• Help track and validate the effectiveness of controls through GRC tools or reports.

• Collaborate with GRC leadership to create reports, metrics, and presentations for management.

• Contribute to discussions with stakeholders from Legal, Finance, IT, and Operations.

• Provide daily administrative and research support to the GRC team.

• Exhibit initiative, curiosity, and a dedication to mastering the fundamentals of risk and compliance.

⛳️ Requirements

• Excellent organizational and written communication abilities.

• Detail-oriented with a strong analytical mindset and problem-solving skills.

• Interest in learning about frameworks such as NIST, COBIT, ISO 27001, or SOC 2.

• Eagerness to learn, drive to succeed, and determination to achieve goals.

• Internship experience in governance, risk, compliance, audit, or similar fields (internships and academic experience considered).

• Bachelor's degree (completed or in progress) in Information Security, Risk Management, Business Administration, or a related discipline — or equivalent experience.

• Experience in supporting policy writing, audits, or risk assessments.

• Familiarity with GRC tools or risk management platforms.

• Understanding of cybersecurity, data protection, or IT operations concepts.

• Relevant certifications (e.g., Security+, CISA, CISM, CGRC) are advantageous.

🏝️ Benefits

• Opportunity to gain practical GRC experience in a nurturing environment.

• Collaborate directly with senior GRC leadership and cross-functional teams.

• Develop the skills necessary to advance into a full-time GRC Analyst position.

• Acquire enterprise-wide exposure to risk management, compliance, and governance functions.

• Join a team that promotes a risk-first culture throughout the organization.