GRC Analyst

Job Description Insight Global is seeking a Technology Risk Governance Analyst to support a Fortune 100 fintech organization. This individual will evaluate technology exception requests, standards deviations, and risk acceptance activities across cloud and on-premises environments. The ideal candidate has experience within GRC, technology risk, or information security and can effectively assess control gaps, compensating controls, and overall risk exposure. Responsibilities Review, assess, and manage technology exception and risk acceptance requests. Analyze control gaps and evaluate associated risk, impact, and mitigating controls. Partner with engineering, security, and business stakeholders to collect supporting information and facilitate reviews. Track exception requests through approval, renewal, and closure processes. Maintain risk documentation, exception inventories, and governance records. Prepare reporting and trend analysis on exception activity, recurring risks, and control deficiencies. Ensure governance requirements, standards, and risk records remain accurate and up to date. Qualifications 5-8+ years of experience in Information Security, Technology Risk, IT Audit, Governance, Risk & Compliance (GRC), or a related field. Experience conducting risk assessments and control gap analyses within enterprise technology environments. Strong understanding of security controls, technology governance, and risk management principles. Experience supporting both cloud and on-premises infrastructure environments. Ability to assess technology exceptions, standards deviations, and compensating controls. Experience working cross-functionally with engineering, security, infrastructure, and business teams. Strong written and verbal communication skills with the ability to articulate technical risks to non-technical audiences. Experience managing technology exception, risk acceptance, or waiver processes within a large enterprise. Familiarity with common security and control frameworks such as NIST, ISO 27001, CIS Controls, or COBIT. Experience using GRC platforms for risk tracking and governance workflows. Background in regulated industries such as financial services, fintech, healthcare, or technology. Understanding of identity and access management, authentication controls, infrastructure security, and security governance practices. EEO Statement Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. #J-18808-Ljbffr