Governance Risk & Compliance (GRC) Analyst

Location: Lakewood, CO Salary: $50.00 USD Hourly - $65.00 USD Hourly Description:
Job Title: Governance Risk and Compliance (GRC) Analyst

Location: Hybrid Tue-Thursday - Lakewood, CO 80215

Position Type : 3 months contract to hire. Converting after 3 months.

Contact : Email resume to David Kellogg, Sr. Recruiter at the Judge Group -

Job Description:
The GRC Analyst is part of the Governance, Risk and Compliance function within the Global Information Security Office. This role supports the implementation of enterprise-wide security governance, risk management, and compliance programs. The analyst works under the direction of the GRC Functional Leader and collaborates with regional Information Security Officers and cross-functional teams to support global standards and local regulatory requirements.

Responsibilities:

• Support company-wide risk assessments for new systems, projects, and business processes
• Assist with internal audits and control reviews, including J-SOX compliance
• Prepare audit documentation and coordinate responses to internal and external auditors
• Track and follow up on remediation activities to ensure timely resolution
• Assist in drafting, updating, and maintaining information security policies, standards, and procedures
• Review applicable regulations and frameworks such as ISO 27001 and NIS2
• Support global rollout and implementation of security policies
• Monitor compliance with security standards and regulatory requirements including ISO 27001, NIS2, and GDPR
• Collect and organize compliance evidence
• Support certification efforts such as ISO 27001 and ISO 42001
• Conduct third-party and supplier risk assessments
• Distribute questionnaires, evaluate responses, and validate controls
• Document risks and escalate high-risk findings
• Support security awareness and training programs
• Develop training materials and e-learning content
• Assist with phishing simulations and awareness campaigns
• Monitor global cybersecurity regulations related to IT systems, industrial control systems, and critical infrastructure
• Track emerging regulatory requirements and support gap assessments
• Support development and maintenance of the CISO dashboard
• Collect and analyze KPIs and KRIs related to risk, compliance, audits, and training
• Assist in reporting and visualization for leadership
• Support AI security governance initiatives
• Assist with risk assessments related to artificial intelligence systems and tools

Additional Responsibilities:

• Improve GRC processes, tools, and documentation
• Prepare reports and presentations for leadership and committees
• Support internal security projects and initiatives
• Coordinate security committees and working groups
• Perform additional duties as assigned

Required Qualifications:

• Knowledge of information security policies, regulations, and frameworks such as ISO 27001
• Familiarity with regulatory requirements including data protection and cybersecurity laws
• Understanding of audit processes and control frameworks such as J-SOX
• Experience with risk assessment and issue management
• Strong analytical and problem-solving skills
• Effective communication and stakeholder collaboration skills

Preferred Qualifications:

• Professional certifications such as CISSP, CISA, CISM, or ISO 27001 Lead Implementer

Preferred Skills:

• Experience with GRC tools such as BitSight, Drata, OneTrust, or Archer
• Understanding of cybersecurity domains including identity management, endpoint protection, vulnerability management, and cloud security
• Experience with project coordination and cross-functional initiatives
• Ability to analyze risk metrics and compliance data
• Familiarity with KPI and KRI reporting and dashboards
• Awareness of emerging cybersecurity regulations such as NIS2 and AI governance frameworks
• Experience working with global teams across regions

Education:

• Bachelor's degree in Information Security, Cybersecurity, Information Systems, Computer Science, or a related field, or equivalent experience

Experience:

• 3 to 5 years of experience in information security, risk management, compliance, IT audit, or a related field
• Experience in global or regulated environments preferred

Work Environment:

• Office-based role requiring sitting, speaking, hearing, and computer use
• May include occasional lifting of up to 20 pounds
• Reasonable accommodations may be provided for individuals with disabilities

Medical, dental, and vision insurance are available to qualified candidates who meet eligibility requirements.
By providing your phone number, you consent to: (1) receive automated text messages and calls from the Judge Group, Inc. and its affiliates (collectively "Judge") to such phone number regarding job opportunities, your job application, and for other related purposes. Message & data rates apply and message frequency may vary. Consistent with Judge's Privacy Policy, information obtained from your consent will not be shared with third parties for marketing/promotional purposes. Reply STOP to opt out of receiving telephone calls and text messages from Judge and HELP for help.

Contact:

This job and many more are available through The Judge Group. Please apply with us today!