GRC Analyst
B
bswiftBenefits administration
Location: Remote- US, Standard working hours are 8am-5pm Central Time, unless otherwise stated in the Job Description.Full-TimeMiddle
Salary90,000 - 110,000 USD per year
Apply NowOpens the employer's application page
Job Details
- Experience
- Two (2) or more years of experience in information security, IT audit, governance, risk and compliance (GRC), security compliance, client assurance, or a related discipline.
- Required Skills
- Microsoft ExcelPowerPoint
Requirements
- Bachelor’s degree in Cybersecurity, Information Systems, Business Administration, Risk Management, Accounting, or a related field, or an equivalent combination of education and work experience.
- At least two years of experience in information security, IT audit, GRC, security compliance, client assurance, or a related discipline.
- Working knowledge of SOC 2, access management, least privilege, segregation of duties, disaster recovery, data protection, security testing, and controls.
- Experience interpreting questionnaires, gathering information from stakeholders, and preparing accurate, professional responses.
- Strong written communication skills, including the ability to explain technical and compliance concepts to technical and non-technical audiences.
- Strong analytical and problem-solving skills.
- Ability to manage multiple priorities and deadlines in a fast-paced environment.
- Strong organizational, documentation, and follow-up skills, with attention to detail.
- Proficiency with Microsoft Office applications, including Word, Excel, PowerPoint, and Teams.
- Ability to maintain confidentiality, exercise sound judgment, and work independently while partnering across departments.
- Preferred: experience with customer security questionnaires, SOC 2 or IT audits, user access reviews, or security contract reviews.
- Preferred: familiarity with SecurityPal, Archer, OneTrust, MetricStream, or similar platforms; certifications such as CISA, CRISC, Security+, or CISSP.
Responsibilities
- Serve as a primary contact for client assurance requests, including security questionnaires, due diligence inquiries, RFP security sections, SOC reports, bridge letters, and penetration test summaries.
- Review client security questionnaires and prepare accurate, defensible responses aligned with company policies and security practices.
- Partner with Sales, Client Experience, Legal, Product, and Information Security teams to gather information and respond to customer inquiries.
- Use approved security questionnaire and AI-enabled response tools to draft and refine responses while ensuring accuracy and appropriate disclosure.
- Maintain reusable security response content and documentation.
- Coordinate evidence requests and control documentation for internal and external audits, including SOC 2 assessments.
- Collect and maintain audit-ready evidence and support governance, risk, compliance, and remediation activities.
- Execute recurring User Access Reviews for critical systems and applications, tracking evidence and remediation actions.
- Support review and negotiation of customer security addenda, contract language, and redlined security requirements with Legal and Information Security.
- Identify and implement improvements to GRC processes, documentation, automation, and reporting.
View Full Description & ApplyYou'll be redirected to the employer's site
