GRC Analyst

Glocomms is partnered with a leading IT and Cloud Computing firm seeking an Information Security Governance, Risk & Compliance (GRC) Analyst to support and enhance the organization's security governance, risk management, and compliance programs. This individual will play a key role in identifying and managing information security risks, maintaining governance frameworks, overseeing third-party risk processes, and ensuring alignment with industry standards and regulatory requirements. The ideal candidate is a collaborative security professional who can effectively balance business objectives with risk management and compliance needs. Responsibilities Manage security governance, risk management, and compliance activities across the organization. Conduct risk assessments and maintain the enterprise risk register. Lead third-party and vendor risk assessment processes. Develop and maintain information security policies, standards, and procedures. Participate in security reviews, change management reviews, and risk discussions. Track security exceptions and support remediation efforts. Monitor compliance with security frameworks and regulatory requirements. Create risk reports, dashboards, and executive-level updates. Partner with engineering, legal, HR, operations, and business teams on security initiatives. Drive continuous improvement of governance and risk management processes. Qualifications 5+ years of experience in Information Security, GRC, Risk Management, Compliance, or Audit. Experience conducting security risk assessments and managing risk remediation activities. Knowledge of third-party risk management and vendor security reviews. Experience developing security policies, standards, and governance documentation. Familiarity with frameworks such as ISO 27001, SOC 2, NIST CSF, NIST 800-53, and CIS Controls. Experience with GRC platforms such as ServiceNow GRC, Archer, Vanta, Drata, or Hyperproof. Strong communication, documentation, and stakeholder management skills. Certifications such as CISM, CRISC, CISA, CISSP, or ISO 27001 certifications are preferred. Benefits Competitive base salary and annual bonus. Comprehensive medical, dental, and vision coverage. 401(k) with company match. Generous paid time off and company holidays. Flexible work environment, including hybrid or remote options where applicable. #J-18808-Ljbffr