GRC (Governance, Risk, and Compliance) Analyst
New
Y
YipitDataMarket research analytics
This role may be performed fully remotely within the United States., Most employees work East Coast hours.Full-TimeMiddle
Salary$102,500 / year
Apply NowOpens the employer's application page
Job Details
- Required Skills
- Compliance
Requirements
- Experience in security, compliance, risk, audit, privacy, or vendor risk management.
- Familiarity with SOC 2, NIST CSF, or similar security and compliance frameworks.
- Ability to understand whether evidence proves that a control is working.
- Strong writing skills to clarify complex compliance requirements for non-technical teams.
- Ability to connect policy or framework requirements to real-world system and human behavior.
- Capability to identify inconsistencies and missing information.
- Comfortable asking follow-up questions and respectfully challenging answers when necessary.
- Organizational skills to manage multiple workstreams and meet deadlines.
- Strong communication skills to explain the importance of requirements to technical and non-technical stakeholders.
- Judgment to work independently and know when to escalate issues.
Responsibilities
- Take ownership of GRC workstreams and drive them from the initial request through evidence collection, testing, remediation, and completion.
- Test security controls and determine whether they are actually working, rather than simply confirming that a document exists.
- Conduct risk assessments, identify meaningful gaps, and help teams develop remediation plans.
- Map controls across SOC 2 and other frameworks so one strong control can satisfy multiple requirements.
- Coordinate recurring work such as access reviews, control testing, policy reviews, risk updates, and audit evidence requests.
- Support customer security questionnaires by finding the right information and ensuring accurate responses.
- Draft and maintain policies, standards, control narratives, risk records, and metrics.
- Track findings and remediation commitments, following up with owners to ensure issues are resolved.
- Research governance strategies for emerging technologies, including AI products and data handling.
View Full Description & ApplyYou'll be redirected to the employer's site
