Cyber Security GRC Analyst – Governance, Risk & Compliance

About the role

Aaratech Inc. is seeking a Cyber Security GRC Analyst to support governance, risk and compliance initiatives. The role involves managing security frameworks, supporting audit readiness, and conducting risk assessments to strengthen the organization’s security posture.

Key responsibilities

• Support control testing and evidence collection for NIST, ISO 27001, and SOC 2 requirements.
• Conduct compliance gap assessments and track remediation activities.
• Develop and maintain security policies, standards, and compliance documentation.
• Perform third‑party and vendor risk assessments.
• Collaborate with IT, security, and business teams during audit and compliance activities.
• Prepare audit‑ready documentation, reports, and compliance evidence.

Required profile

• Bachelor’s degree in Cyber Security, Information Technology, Information Systems or related field.
• 4+ years of experience in IT audit, GRC, compliance or risk management.
• Working knowledge of NIST, ISO 27001, SOC 2 and security control frameworks.
• Experience supporting audits, compliance initiatives and policy management.
• Strong organizational, analytical, communication and problem‑solving abilities.

Required skills

• NIST framework
• ISO 27001
• SOC 2 compliance
• Third‑party/vendor risk assessment
• Security policy development

What we offer

• Competitive salary $80,000 – $90,000 per year (negotiable).
• Opportunity to work on cutting‑edge security initiatives within a technology‑driven organization.
• Collaborative environment with skilled professionals.