GRC Analyst

Role overview Support governance, risk, and compliance programs by assessing organizational risks, maintaining controls, and helping teams meet applicable regulatory and audit expectations. The role combines ongoing risk tracking with practical coordination across teams, including documentation, reporting, policy upkeep, and training. It is remote.

Responsibilities - Conduct recurring risk reviews, maintain the risk register, and support assessments of business processes and systems. - Work with stakeholders to define mitigation plans and track them through completion. - Help develop risk metrics and reports for leadership. - Monitor compliance with relevant frameworks and internal controls, and coordinate audit evidence collection. - Maintain GRC policies and secure documentation for audits, investigations, and post-incident reviews. - Support compliance and security training and create awareness materials.

Requirements - 3–5 years of experience in governance, risk, compliance, audit, or a related field. - Familiarity with frameworks such as SOC 2, ISO 27001, HIPAA, or FedRAMP. - A degree in business, information security, risk management, or a related area, or equivalent experience. - Strong organization, attention to detail, and follow-through. - Clear communication and collaborative relationship-building skills across internal teams and external stakeholders.

Nice to have - Experience supporting audits or certifications, or using GRC and risk management platforms. - Understanding of information security controls and principles. - Customer-facing experience; familiarity with GovRAMP, StateRAMP, or FedRAMP is a plus.

Benefits and work setup - Remote role with a stated salary range of $95,000–$105,000, dependent on location, experience, and qualifications. - Medical, dental, and vision coverage; 401(k) matching; paid holidays; paid parental leave; volunteer time off; and a remote work stipend. - Unlimited paid time off.