GRC Analyst

The GRC Analyst supports audit readiness, regulatory compliance, and risk management initiatives across multiple frameworks. This role ensures effective governance, policy implementation, and third-party risk oversight while aligning security and privacy practices with industry standards.

Key Responsibilities:

• Support compliance across frameworks such as ISO 27001, SOC 2, NIST Cybersecurity Framework, NIST SP 800-171, and CMMC
• Guide privacy practices aligned with GDPR
• Lead Third-Party Risk Management (TPRM): vendor inventory, risk reviews, tiering, and tracking remediation
• Collaborate with Legal and Procurement on contract risk, clauses, and compliance obligations
• Own and enhance security awareness & training programs (including phishing simulations and KPI tracking)
• Administer and optimize GRC platforms such as Hyperproof
• Conduct risk assessments and maintain risk registers with accountability tracking
• Develop and implement policies, standards, and governance procedures
• Support audit readiness, gap analysis, and control testing across frameworks

Key Responsibilities:

• Experience with GRC frameworks and audit processes.
• Strong understanding of risk management and compliance.
• Familiarity with third-party risk and contract security requirements.
• Excellent documentation and stakeholder communication skills.