Cyber Security GRC Analyst – Governance, Risk & Compliance

About the role

Aaratech Inc. is looking for a Cyber Security GRC Analyst to drive Governance, Risk and Compliance initiatives. You will help manage security frameworks, support audit readiness, and ensure the organization meets industry standards.

Key responsibilities

• Support control testing and evidence collection for NIST, ISO 27001, and SOC 2 requirements.
• Conduct compliance gap assessments and track remediation activities.
• Develop and maintain security policies, standards, and compliance documentation.
• Perform third‑party and vendor risk assessments.
• Collaborate with IT, security, and business teams during audit and compliance activities.
• Prepare audit‑ready documentation, reports, and compliance evidence.

Required profile

• Bachelor's degree in Cyber Security, Information Technology, Information Systems or a related field.
• 4+ years of experience in IT audit, GRC, compliance or risk management.
• Working knowledge of NIST, ISO 27001, SOC 2 and related security control frameworks.
• Experience supporting audits, compliance initiatives, and policy management.
• Strong organizational, analytical, communication and problem‑solving abilities.

Required skills

• NIST framework
• ISO 27001 framework
• SOC 2 compliance
• Security control frameworks
• Audit support and evidence collection
• Vendor risk assessment

What we offer

• Competitive salary range of $80,000 – $90,000 per year (negotiable).
• Opportunity to work on cutting‑edge security projects in a technology‑driven environment.