GRC Analyst, Entry Level

About the role

Jobright is a personal AI job search agent that simplifies and accelerates the job search process. The entry-level GRC Analyst supports governance, risk, and compliance operations by maintaining risk and control documentation, coordinating assessments and remediation, preparing audit evidence, and collaborating on security and business requirements.

• Build real, production AI agents used by real users
• High ownership and impact
• Work at the intersection of AI, agents, and product
• Shape how people experience AI-driven job search

Responsibilities

• Maintain risk registers, control inventories, and compliance evidence
• Assist with control assessments, gap analyses, and remediation tracking
• Collect and organize evidence for audits and customer security reviews
• Help update policies, procedures, and security documentation
• Track findings, owners, due dates, and status through completion
• Prepare clear reports and collaborate with security, legal, and operations teams

Requirements

• Basic understanding of governance, risk, compliance, or information security concepts
• Strong attention to detail, organization, and written communication
• Ability to interpret requirements and document evidence clearly
• Comfort working with spreadsheets, trackers, and structured review processes
• Ability to manage priorities independently in a remote environment

Qualifications

• Exposure to NIST, ISO 27001, SOC 2, CIS Controls, or similar frameworks
• Internship, coursework, certification, or project experience in security, audit, or compliance
• Familiarity with GRC, ticketing, document management, or risk tracking tools
• Security+, ISO 27001 Foundation, or another entry-level certification