GRC Analyst
O
OptivGRC, cybersecurity
Fully remote and can be hired anywhere in the continental U.S.Full-TimeJunior
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Experience
- At least 2 years of relevant experience
Requirements
- At least 2 years of relevant experience in GRC, audit support, access governance, compliance operations, cybersecurity, risk management, third-party risk operations, or a related control function.
- Working knowledge of access governance, account status and ownership, elevated access, exception handling, evidence quality, record retention, and escalation practices.
- Familiarity with foundational audit and compliance concepts, including source evidence, review criteria, populations, findings, management responses, and remediation records.
- Ability to review structured records, reconcile data across systems, identify discrepancies, maintain evidence, and follow defined procedures.
- Proficiency with spreadsheet analysis and reporting, including filtering, lookups, reconciliation, and pivot tables.
- Experience with workflow systems, email-based reports, and document repositories.
- Ability to manage recurring and request-driven work, meet deadlines, maintain accurate trackers, and escalate exceptions promptly.
- Ability to handle confidential and security-sensitive information with discretion and comply with applicable access, privacy, and data-handling requirements.
- Ability to communicate clearly with technical and nontechnical stakeholders and document work so that it is reviewable and auditable.
- Bachelor’s degree in cybersecurity, information systems, risk management, business, or a related field, or an equivalent combination of education, training, certifications, military service, and relevant practical experience.
- Experience with access reporting, elevated-access reviews, inactive-account reconciliation, review trackers, evidence repositories, and exception records.
- Experience preparing audit evidence, compliance reports, or regulatory support materials under established review criteria.
- Experience supporting GRC or third-party risk workflows in a managed-services environment.
- Familiarity with NIST Cybersecurity Framework, NIST SP 800-53, ISO/IEC 27001, SOC 2, or applicable regulatory requirements.
- Relevant training or certification such as Security+, CISA, CRISC, or CGRC is preferred.
Responsibilities
- Generate user access and permissions reports using approved systems and procedures.
- Reconcile non-user and inactive accounts, document discrepancies, and route exceptions for resolution.
- Review system activity logs and audit trails according to defined criteria and schedules.
- Check evidence for completeness, accuracy, applicable period, source, and retrievability, and maintain traceable records.
- Complete compliance forms, review trackers, attestations, and supporting records using approved source information.
- Assist in preparing audit reports and supporting evidence for regulatory and other assigned reviews.
- Manage report queues and request tracking for GRC and third-party risk workflows.
- Monitor aging items, follow up for missing information, and escalate blockers and overdue requests.
- Prepare operational metrics and identify recurring process or data-quality issues.
View Full Description & ApplyYou'll be redirected to the employer's site
