Governance Risk and Compliance Analyst

About the role

Our client is seeking an experienced and highly motivated Information Security Analyst (ISA) to join their Governance, Risk, and Compliance (GRC) team. In this role, you will engage with cross-functional business units to understand reporting, data, and security needs. You will collaborate across departments to define project requirements, establish data dependencies and relationships to develop system activity diagrams and data models, and draft specifications for enterprise information policies. Additionally, you will support user adoption, training, and customer service while working alongside technical project managers to deliver high-quality project artifacts.

Responsibilities

• Perform risk assessments and audit reviews; generate comprehensive findings reports, action plans (POA&Ms), and recommendations for security improvements and tracking.
• Review, update, and manage security audit plans, system security plans, and risk documentation to ensure accuracy and proactive problem-solving.
• Evaluate system data, draft environmental observations/incident reports, and review suspicious network activity.
• Research industry standards, best practices, laws, and regulations to ensure institutional compliance across all IT systems.
• Develop user adoption and training materials, provide technical guidance to internal teams, and assist project managers in maintaining accurate project documentation.

Qualifications

• Strong working knowledge of cybersecurity and privacy frameworks (e.g., NIST 800-53, HIPAA/HITRUST, IRS Pub 1075, CJIS, MARS-E, Risk Management Framework / RMF).
• Deep understanding of internal auditing, internal controls, risk management practices, and information system authorizations.
• Familiarity with technical system audits across multiple IT domains, including Windows/Unix, database administration, networking, and software development.
• Ability to draft, assess, and continuously improve security policies and procedures aligned with strategic goals.
• Excellent interpersonal, written, and oral communication skills with experience presenting to senior management.
• Ability to exercise sound judgment when policies are ambiguous, synthesize feedback, and build strong cross-departmental relationships.

Pay

$40 - $44 per hour

Schedule

8am to 5pm