GRC Analyst

About the role

Coretelligent is seeking a diligent GRC Analyst to join our team. This role will serve as a key contributor to Coretelligent's holistic cybersecurity solutions by managing critical security awareness programs, conducting vendor risk assessments, and maintaining controls frameworks. The successful candidate will work with clients and Coretelligent staff to support governance, risk, and compliance programs and ongoing security awareness initiatives and third-party risk management activities.

Responsibilities

• Assist vCISO staff with client cybersecurity & governance program management
• Update policies to ensure alignment with client practices
• Conduct comprehensive vendor risk assessments and manage vendor risk monitoring programs
• Collaborate with multiple departments to complete security and compliance due diligence questionnaires on behalf of clients, ensuring accurate and timely responses
• Manage and administer security awareness training and phishing simulation campaigns, including content deployment, user enrollment, and progress tracking
• Collect evidence for frameworks and regulations
• Manage, coordinate, and track client projects and security-related audits
• Prepare detailed reports on security and governance activities, findings, and risk assessments

Required Skills and Qualifications

• Experience: 3+ years in a GRC role focused on IT or cybersecurity controls, and/or 3+ years in an IT role with cybersecurity focus
• Excellent analytical, organizational, and problem-solving skills
• Past experience at a Managed Services Provider
• Strong written and verbal communication skills
• Comfortable working with various technical tools to gather information on systems and settings
• Detail-oriented with a commitment to accuracy and meeting deadlines
• Ability to manage multiple projects simultaneously while maintaining quality standards
• High personal and professional ethical standards

Preferred Skills

• Cybersecurity / Compliance certifications (CompTIA Security+, CGRC, CRISC, CISSP, CISA, etc.)
• Hands-on experience with GRC platforms, security awareness training tools, and phishing simulation platforms
• Familiarity with regulations pertaining to the financial services or biotech verticals, including SEC, SOX, and HIPAA
• Experience with vendor management platforms and third-party risk assessment methodologies

Pay

Salary Range: $70,000–$88,000 (varies by location and experience; excludes MA, NY, and CA)

Benefits

• Health, Dental, & Vision coverage
• Flexible Spending Account (FSA)
• 401k with employer contribution
• Health Reimbursement Account (HRA)
• Health Savings Account (HSA)
• Life Insurance and Disability Insurance
• Paid Parental Leave
• Holiday Pay
• Flexible Vacation & Sick Days

Perks

• Twelve holidays, including a day off on your birthday and work anniversary
• Flexible vacation policy
• Monthly rewards and spot bonuses for demonstrated excellence
• Community and social events
• Learning and development opportunities
• Flexible working arrangements
• $100 quarterly well-being allowance and other health & wellness perks