GRC Analyst

Want to be a bswifter? At bswift we’ve been transforming benefits administration since 1996, making it simpler, smarter, and more human. Our state-of-the-art, cloud-based technology and services empower employees to understand, manage, and love their benefits. From downtown Chicago, and remotely across the country, we serve thousands of companies and millions of people nationwide, reducing administrative burdens and freeing HR teams to focus on creating thriving, people-first workplaces. We’re looking for motivated and goal-driven individuals who share our passion for delivering excellence and creating solutions that make a difference. The reward is a fun, flexible and creative environment with ample opportunity for professional and personal growth. If you love the bswift values of pursue excellence, embrace accountability, deliver superior service, and be a great place to work, we want to hear from you! ABOUT US bswift is a leading benefits administration company that specializes in providing tailored solutions for our clients. Our mission is to simplify the complex world of employee benefits and deliver exceptional service to our clients. We are seeking a motivated and detail-oriented GRC Analyst to join our Information Security team. WHAT YOU’LL DO The GRC Analyst is a member of the Information Security team and is responsible for supporting governance, risk, compliance, and client assurance activities. This role serves as a key partner to Sales, Client Experience, Legal, Product, and Information Security teams by responding to customer security inquiries, supporting audit and compliance efforts, and maintaining processes that support security and regulatory obligations.

The ideal candidate possesses a strong foundation in information security concepts, excellent written communication skills, and the ability to translate complex technical information into clear, concise, customer-friendly responses. This individual thrives in a deadline-driven environment, enjoys collaborating across teams, and demonstrates strong attention to detail, organization, and follow-through. WHAT YOU WILL BE RESPONSIBLE FOR (Essential Functions) Reasonable accommodations may be made to enable individuals with disabilities to perform these essential functions. Client Assurance & Security Questionnaire Management - Serve as a primary point of contact for client assurance requests, including security questionnaires, due diligence inquiries, RFP security sections, SOC reports, bridge letters, penetration test summaries, and other security-related documentation. - Review and respond to detailed client security questionnaires by interpreting requirements and providing accurate, defensible responses aligned with company policies and security practices. - Partner with Sales, Client Experience, Legal, Product, and Information Security teams to gather information and respond to customer security inquiries within established service-level expectations. - Utilize approved security questionnaire and AI-enabled response tools to draft and refine responses while ensuring accuracy, consistency, and appropriate disclosure of information. - Support the development, maintenance, and continuous improvement of reusable security response content and documentation. Risk, Compliance & Audit Support - Support internal and external audits, including SOC 2 and other compliance assessments, by coordinating evidence requests and assisting with control documentation. - Collect, organize, and maintain audit-ready evidence supporting compliance initiatives and recurring review activities. - Assist with governance, risk, and compliance processes designed to maintain adherence to security frameworks, internal controls, and regulatory requirements. - Support remediation efforts by tracking action items and partnering with stakeholders to ensure timely resolution of identified issues.