GRC Analyst

Posted 48ds ago

Employment Information

Education
Salary
Experience
Job Type

Report this job

Job expired or something wrong with this job?

Job Description

GRC Analyst supporting cybersecurity and risk management initiatives at Point Wild. Engaging in audits, assessments, and compliance documentation for regulatory requirements.

Responsibilities:

  • Conduct regular security audits and risk assessments to identify vulnerabilities and areas for improvement.
  • Monitor and assess compliance with internal security policies and external regulatory requirements.
  • Recommend and track appropriate security controls and mitigation strategies.
  • Maintain detailed records of compliance activities, including assessments, corrective actions, and audit results.
  • Prepare compliance documentation and reports for internal leadership and external auditors.
  • Maintain and support the Simpluris cybersecurity compliance program.
  • Regularly update policies, procedures, standards, and documentation to align with evolving regulatory and contractual requirements.
  • Develop and maintain templates, tools, and resources to support compliance and audit readiness.
  • Utilize compliance and GRC tools to track controls, evidence, risks, and remediation efforts.
  • Support third-party risk assessments, vendor questionnaires, and ongoing vendor compliance monitoring.
  • Serve as the primary point of contact between Corporate, Technology, and Operational teams.
  • Collaborate with IT, legal, and business units to address compliance challenges.
  • Communicate complex technical and regulatory requirements in a clear, accessible manner to diverse audiences.
  • Conduct or support internal security audits and compliance reviews.
  • Stay current with industry standards, federal regulations, and cybersecurity best practices.
  • Support incident response activities, investigations, and post-incident documentation as needed.
  • Collect, validate, and maintain audit evidence to support regulatory and customer audits.
  • Assist with control testing, gap analysis, and remediation tracking.

Requirements:

  • Bachelor’s degree in information technology, Cybersecurity, Computer Science, Information Security, or a related field.
  • 1–3 years of experience in IT security, compliance, risk management, or a related role.
  • Experience with compliance and GRC tools (Drata or Vanta).
  • Familiarity with cybersecurity and frameworks, including:
  • NIST 800-53 R5 (CMMC is a plus)
  • Type 2 SOC 2
  • HIPAA, PCI-DSS, or GDPR.
  • Strong understanding of information security principles and best practices.

Benefits:

  • Competitive pay
  • Generous health and wellness benefits
  • Retirement savings plans
  • Parental leave
  • Much more!