GRC Analyst

Job Title: GRC Analyst

Location Requirements: Onsite / Salt Lake County

Job Type: Contract

Role Overview:
You will support and strengthen the organization’s information security governance, risk management, and compliance practices. This hands‑on role involves reviewing audit findings, identifying gaps, and developing clear, actionable documentation to address risks. You’ll transform technical security requirements into practical guidance understandable for both technical and nontechnical teams. Your work will focus on creating sustainable policies, procedures, and remediation practices that can be adopted organization-wide.

Responsibilities:

• Review and analyze audit findings, security assessments, and compliance documentation to identify gaps and risks.
• Evaluate existing information security policies, procedures, standards, and controls to find deficiencies and missing documentation.
• Develop actionable recommendations and remediation plans to address audit findings and improve security and compliance practices.
• Rewrite and update security policies and procedures to align with organizational needs, industry best practices, and standards.
• Create new policies, procedures, standards, and supporting documentation where gaps exist.
• Translate audit findings and security requirements into clear, structured requirements, plans, and reports.
• Develop documentation that communicates security expectations and steps to technical teams, business stakeholders, and end users.
• Collaborate with IT, security, compliance, and business teams to validate requirements and ensure practicality.
• Help establish consistent documentation practices and repeatable processes.
• Track remediation activities, document progress, and support evidence collection.
• Recommend improvements to governance processes, policy management, risk documentation, and internal controls.

Required Qualifications:

• Experience in Governance, Risk & Compliance (GRC), information security, IT risk management, audit remediation, or related discipline.
• Demonstrated experience reviewing audit findings and translating gaps into remediation plans.
• Strong experience writing, revising, and maintaining security policies, procedures, standards, and requirements documentation.
• Ability to analyze existing documentation, identify deficiencies, and develop practical recommendations.
• Excellent technical writing, documentation, and communication skills.
• Ability to explain complex security and compliance concepts clearly to technical and nontechnical audiences.
• Strong analytical, organizational, and problem‑solving skills.
• Ability to work independently, manage multiple priorities, and collaborate effectively across teams.

Equal Employment Opportunity Statement
Gravity IT Resources is an Equal Opportunity Employer. We are committed to creating an inclusive environment for all employees and applicants. We do not discriminate on the basis of race, color, religion, sex (including pregnancy, sexual orientation, or gender identity), national origin, age, disability, genetic information, veteran status, or any other legally protected characteristic. All employment decisions are based on qualifications, merit, and business needs.