GRC (Governance, Risk, and Compliance) Analyst

For our client, we are seeking a GRC (Governance, Risk, and Compliance) Analyst to join the team of a leader in the Information Technology space. This role will own governance, risk, and compliance workstreams that keep the organization prepared for audits and aligned with security standards. You will partner closely with security, operations, and cross-functional stakeholders to translate requirements into practical actions that support control effectiveness and sound risk management. The position is hands-on, with a focus on maintaining audit readiness, testing controls, and improving compliance processes across the business. Location: Remote - US based candidates only, no visa sponsorship available Compensation: $102,500+ annually Responsibilities Own GRC workstreams from request to completion Ensure the organization remains audit-ready year-round Test security controls for effectiveness beyond documentation Conduct risk assessments and develop practical remediation plans Organize recurring tasks such as access reviews and control testing Evaluate vendor security practices against company standards Translate compliance requirements into actionable tasks for teams Qualifications 5-7 years of experience in security, compliance, risk, or audit Hands-on SOC 2 experience, including audit support and control testing Familiarity with SOC 2, NIST CSF, and similar frameworks Strong writing skills to simplify complex requirements Ability to manage multiple workstreams and meet deadlines Benefits Flexible work hours and vacation Generous 401K match and parental leave Wellness budget and learning reimbursement High-impact work environment focused on personal growth and ownership Our client is an equal opportunity employer. We encourage you to apply even if you don’t meet every qualification—your background could be exactly what this team needs.