GRC Security Analyst
Core
Support governance, risk management, and compliance activities including policy maintenance, risk assessments, audit coordination, and client-facing reporting.
Role type
GRC Security Analyst
Builds
Governance reports, risk registers, compliance trackers, and audit documentation packages
Domain
Information Security / Cybersecurity
Deliverable
dashboards & analysis
Required skills
Information security frameworks (ISO 27001, NIST CSF, CIS Controls, PCI-DSS), risk assessment methodologies, audit processes, policy development, Microsoft Office proficiency
Preferred skills
GRC platforms (ServiceNow, RSA Archer), managed security services experience, client-facing environment experience
Technologies
ServiceNow, RSA Archer
Responsibilities
Develop and maintain security policies and procedures, conduct risk assessments and maintain risk registers, support internal and external audits, prepare GRC reports and dashboards, coordinate control assessments, engage with client stakeholders on compliance matters
Seniority
Mid-level, hands-on IC
