GRC Analyst II
Core
Support Managed Cloud Security Posture Management (CSPM) services by conducting risk assessments, compliance gap analyses, and overseeing remediation for cloud environments.
Role type
Mid-level GRC Analyst (IC)
Builds
Customer risk registers, control matrices, compliance reports, and audit evidence packages.
Domain
Cybersecurity / Cloud Security / Regulatory Compliance
Deliverable
dashboards & analysis
Required skills
Security risk assessment, Compliance mapping (ISO 27001, NIST, SOC 2, PCI DSS), Remediation tracking, Audit evidence collection, Risk register management, Control evaluation
Preferred skills
CSPM tool familiarity (e.g., Prowler), MSSP experience, Cloud security knowledge
Technologies
ISO 27001, NIST CSF, NIST 800-53, CIS Controls, SOC 2, PCI DSS, Prowler
Responsibilities
Conduct security risk assessments and compliance gap analyses; Maintain customer risk registers and control matrices; Coordinate remediation governance with cloud and security teams; Prepare customer-facing risk and compliance reports; Support audit readiness through evidence collection; Improve standardized GRC reporting procedures
Seniority
Mid-level, independent contributor
