GRC (Governance, Risk, and Compliance) Analyst

For our client, we are seeking a GRC (Governance, Risk, and Compliance) Analyst to join the team of a leader in the Information Technology space. This role will own key governance, risk, and compliance workstreams that keep the organization audit-ready and strengthen its security posture. You will partner closely with security, legal, and operational stakeholders to coordinate assessments, validate controls, and drive practical remediation. The position is well suited for someone who can bring structure to recurring compliance activities while translating complex requirements into clear, actionable guidance. Location: Remote - US based candidates only, no visa sponsorship available Compensation: $102,500 annually Responsibilities Take ownership of GRC workstreams from request through completion Ensure the organization remains audit-ready throughout the year Test and validate the effectiveness of security controls Conduct risk assessments and develop realistic remediation plans Map controls across frameworks to streamline compliance efforts Coordinate recurring tasks such as access reviews and policy updates Review vendor security practices to meet company standards Qualifications 5-7 years of experience in security, compliance, risk, or audit-related fields Hands-on experience with SOC 2 audits, including control testing and evidence validation Familiarity with security frameworks such as SOC 2 and NIST CSF Strong writing skills to simplify complex compliance requirements Ability to identify inconsistencies and ask probing questions Experience in vendor risk assessments and security practices evaluation Organizational skills to manage multiple workstreams effectively Benefits Flexible work hours and vacation policies Generous 401K match and parental leave Wellness budget and learning reimbursement Equity included in the compensation package Opportunities for personal growth and skill mastery Our client is an equal opportunity employer. We encourage you to apply even if you don’t meet every qualification—your background could be exactly what this team needs.