Governance, Risk & Compliance (GRC) Analyst

Governance, Risk & Compliance (GRC) Analyst

Client is seeking a GRC Analyst to lead our governance, risk, and compliance initiatives. This role will be instrumental in strengthening their cybersecurity posture, ensuring regulatory compliance, and supporting strategic IT goals.

Key Responsibilities:

• Develop and maintain GRC frameworks aligned with SOC 2, ISO 27001, and CIS standards
• Conduct internal audits and risk assessments across IT systems and processes
• Monitor compliance metrics and report findings to leadership
• Collaborate with IT functional teams to ensure adherence policies
• Maintain and test Business Continuity and Disaster Recovery plans
• Support incident response planning and documentation
• Create IT policies and procedures

Qualifications:

• Bachelor's degree in information security, Computer Science, or related field
• 3+ years in GRC, cybersecurity, or audit roles
• Experience with GRC platforms and audit tools
• Strong analytical and communication skills

Preferred certifications: CISA, CRISC, CISSP