Security Governance Risk & Compliance (GRC) Analyst

1. About Our Client:
The organization operates in the data security industry, addressing the challenge of enabling secure data sharing rather than merely restricting data access. It delivers a platform and applications based on the Trusted Data Format (TDF) open standard, facilitating collaboration and innovation while maintaining privacy and control. Supported by notable investors, the organization serves Fortune 500 companies and government agencies, focusing on secure, compliant data environments.
2. About the Opportunity:
The Security Governance Risk & Compliance (GRC) Analyst role is central to building and maintaining a comprehensive security compliance program aligned with multiple frameworks such as FedRAMP, SOC 2, PCI, HIPAA, GDPR, and CMMC. This position drives compliance efforts, manages risk assessments, and supports the ongoing security posture of the organization, ensuring regulatory standards are met and security controls are effective.
3. Responsibilities:
Manage and implement control frameworks for cloud infrastructure and SaaS environments.
Develop automation for evidence collection across systems.
Conduct risk assessments and recommend mitigation strategies.
Participate in incident response with risk analysis and remediation support.
Support automated controls for risk mitigation across business units.
Integrate CMMC certification processes alongside existing compliance programs.
Facilitate third-party vendor security evaluations and reviews.
Contribute to team growth through individual initiative and learning.
4. Requirements:
At least 5 years of experience in information security, IT audit, IT risk management, or GRC roles.
In-depth knowledge of frameworks such as CMMC, NIST 800-53/800-171, FedRAMP, SOC 2, PCI, or other privacy regulations.
Strong technical understanding of cloud platforms (AWS, GCP, Azure) and familiarity with GRC and SIEM tools.
Ability to communicate risk effectively to technical and business stakeholders.
Experience training teams in security and privacy best practices.
Capability to work autonomously within an agile team.
Strong conflict resolution and issue management skills.
5. Pay Range and Compensation Package:
Compensation ranges from $130,000 to $170,000 per year.
6. Benefits & Perks:
Flexible paid time off policy plus 14 holidays.
$1,500 annual learning and development stipend.
Company-sponsored social events.
Employee Assistance Program access.
Mental health support via Headspace app.
3% retirement account contribution.
Flexible work arrangements to manage personal commitments.
Equal Opportunity Statement:
Equal Opportunity Statement: Our client is an equal opportunity employer. They celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, or national origin.
Note:
RemoteHunter is a recruitment partner of this role. Please note that all employment decisions, including candidate assessment, interviews, hiring, compensation, and employment terms, are made exclusively by the hiring employer.

Work arrangement
No