GRC Analyst
Core
Operate and continuously improve governance, risk, and compliance programs within the Security organization to maintain audit readiness and support compliance frameworks.
Role type
GRC Analyst
Builds
Audit-ready documentation, risk assessments, vendor security reviews, and automated compliance workflows.
Domain
Cybersecurity / Compliance / Risk Management
Deliverable
dashboards & analysis
Required skills
GRC program management, IT audit, security compliance frameworks (SOX, SOC 2, PCI DSS, NIST), vendor risk assessment, data privacy audits, GRC platform usage, control evaluation, risk escalation, SaaS/cloud environment knowledge.
Preferred skills
GRC automation, continuous control monitoring, privacy engineering concepts, compliance dashboard building.
Responsibilities
Lead and support audits across SOX, SOC, PCI, and NIST; Evaluate control design and operating effectiveness; Conduct vendor security and privacy reviews; Respond to customer security questionnaires; Support data privacy audits; Improve GRC operations through automation and AI-enabled workflows.
Seniority
Mid-level, hands-on IC