GRC Analyst
Skills
- Experience with risk assessments, risk registers, and mitigation tracking
- Familiarity with compliance frameworks such as SOC 2, ISO 27001, HIPAA, and FedRAMP
- Proven audit support and evidence collection skills
- Strong organizational skills, attention to detail, and documentation discipline
- Excellent cross-functional communication and stakeholder management
- Ability to build risk reporting and KPIs for leadership visibility
- Basic understanding of information security principles and controls
Responsibilities
- Maintain and update the organizational risk register through ongoing risk reviews
- Conduct risk assessments for business processes and systems and document findings
- Partner with stakeholders to develop, track, and close risk mitigation plans
- Build and deliver risk metrics and executive-level reporting
- Monitor adherence to regulatory frameworks and internal controls (SOC 2, HIPAA, ISO 27001, FedRAMP)
- Coordinate evidence collection and documentation to support audit readiness and certification efforts
- Partner with cross-functional teams to achieve successful audit outcomes with no material findings
- Review and update GRC-related policies on a regular cadence
- Support or lead compliance and security training and awareness initiatives
- Maintain secure documentation for audits, investigations, and post-incident reviews
Education
- Bachelor’s degree in Business, Information Security, Risk Management, or related field, or equivalent experience
- Relevant professional certifications are a plus (CISSP, CISM, CISA, CRISC)
Benefits
- Unlimited PTO policy
- Competitive medical, dental, and vision coverage
- 401(k) matching
- Paid holidays
- Volunteer time off
- Paid parental leave
- Remote work stipend
- Compensation range: $100,000 - $120,000
Average salary estimate
If an employer mentions a salary or salary range on their job, we display it as an "Employer Estimate". If a job has no salary data, Rise displays an estimate if available.
Experienced lawyers with top-tier practice backgrounds will help law firms and in-house teams integrate Harvey through strategic onboarding, enablement, and high-impact customer engagement.
Kyverna Therapeutics is hiring an Executive Director, Regulatory Affairs to lead global regulatory strategy, labeling, and health authority engagement for its cell therapy portfolio.
Lead the surveillance program for a major crypto platform by operating and optimizing Eventus and Scilla, managing investigations, and supporting CFTC/NFA regulatory requirements.
NIQ is hiring an Associate General Counsel to lead negotiation and drafting of complex commercial and licensing agreements and provide strategic legal guidance across multiple business verticals.
Reprise Financial is seeking an AVP of Servicing Controls to lead first-line monitoring, manage audit/exam responses, and drive improvements in servicing compliance and operational risk.
🔮
Hi, I'm Risa! Your AI Career Copilot
you, just ask me below!
