GRC Analyst

Kforce has a client that is seeking a GRC Analyst to work hybrid in Grapevine, TX. Responsibilities:

• Utilize GRC platforms such as ZenGRC and OneTrust to manage compliance initiatives, risk assessments, and policy documentation
• Collaborate with cross-functional teams to gather information, assess risks, and develop strategies for mitigating compliance-related issues
• Conduct regular audits and assessments to ensure adherence to regulatory requirements and industry standards
• Implement and maintain security tools such as Rapid7 and SentinelOne, leveraging them to monitor and respond to security incidents
• Analyze data and generate reports to provide insights into compliance status, risk exposure, and performance metrics
• Stay abreast of regulatory changes, emerging threats, and industry best practices to inform compliance strategies and recommendations
• Serve as a subject matter expert on GRC processes and technologies, providing guidance and training to internal teams as needed
• Communicate effectively with stakeholders at all levels, including executives, technical teams, and external auditors
• Drive continuous improvement initiatives to enhance the efficiency and effectiveness of GRC processes
• Bachelor's degree in Computer Science, Information Security, or related field
• Certifications such as CISSP, CISA, or CRISC are a plus
• 4 years of security experience
• Proven experience working as a GRC Analyst or in a similar role
• Strong technical background with proficiency in security tools and GRC platforms (e.g., ZenGRC, OneTrust, Rapid7, SentinelOne)
• Analytical mindset with the ability to interpret complex regulations and assess their impact on business operations
• Excellent communication and interpersonal skills, with the ability to articulate technical concepts to non-technical stakeholders
• Detail-oriented with strong organizational and project management skills
• Ability to work both independently and collaboratively in a fast-paced environment
• Some project management experience related to security/GRC/audit is highly desirable (not necessarily a formal PMO role)