Cyber Security GRC Analyst – Governance, Risk & Compliance

About the role

Aaratech Inc. is seeking a Cyber Security GRC Analyst to support governance, risk and compliance initiatives. The role involves managing security frameworks, supporting audit readiness, conducting risk assessments and ensuring compliance with industry standards.

Key responsibilities

• Support control testing and evidence collection for NIST, ISO 27001, and SOC 2 requirements.
• Conduct compliance gap assessments and track remediation activities.
• Develop and maintain security policies, standards, and compliance documentation.
• Perform third‑party and vendor risk assessments.
• Collaborate with IT, security, and business teams during audit and compliance activities.
• Prepare audit‑ready documentation, reports, and compliance evidence.

Required profile

• Bachelor’s degree in Cyber Security, Information Technology, Information Systems or related field.
• 4+ years of experience in IT audit, GRC, compliance or risk management.
• Working knowledge of NIST, ISO 27001, SOC 2 and security control frameworks.
• Experience supporting audits, compliance initiatives and policy management.
• Strong organizational, analytical, communication and problem‑solving skills.

Required skills

• NIST framework
• ISO 27001
• SOC 2 compliance
• Risk assessment
• Control testing
• Policy development
• Vendor risk assessment

What we offer

• Competitive salary range $80,000 – $90,000 per year (negotiable).
• Opportunity to work on cutting‑edge security frameworks within a technology‑driven organization.