Cyber Security GRC Analyst – Governance, Risk & Compliance

About the role

Aaratech Inc. is looking for a Cyber Security GRC Analyst to lead Governance, Risk, and Compliance initiatives. You will manage security frameworks, support audit readiness, conduct risk assessments, and ensure compliance with industry standards to strengthen the organization’s security posture.

Key responsibilities

• Support control testing and evidence collection for NIST, ISO 27001, and SOC 2 requirements.
• Conduct compliance gap assessments and track remediation activities.
• Develop and maintain security policies, standards, and compliance documentation.
• Perform third‑party and vendor risk assessments.
• Collaborate with IT, security, and business teams during audit and compliance activities.
• Prepare audit‑ready documentation, reports, and compliance evidence.

Required profile

• Bachelor’s degree in Cyber Security, Information Technology, Information Systems, or a related field.
• 4+ years of experience in IT audit, GRC, compliance, or risk management.
• Working knowledge of NIST, ISO 27001, SOC 2, and security control frameworks.
• Experience supporting audits, compliance initiatives, and policy management.
• Strong organizational, analytical, communication, and problem‑solving abilities.

Required skills

• NIST framework
• ISO 27001 standard
• SOC 2 compliance
• Security control frameworks
• IT audit processes
• Governance, Risk & Compliance (GRC) practices
• Risk assessment methodologies
• Vendor/third‑party risk management