GRC Cybersecurity Analyst – Governance, Risk & Compliance

About the role

As a GRC Cybersecurity Analyst you will help secure clients’ infrastructure, data and software while advancing cybersecurity best practices. You will work alongside a virtual CISO to deliver governance, risk and compliance leadership to medium‑sized technology firms.

Key responsibilities

• Lead internal cybersecurity audits to ensure client environments remain compliant and secure.
• Plan and run tabletop training exercises for client employees to practice incident response.
• Perform quantitative risk assessments to guide smart cybersecurity investments.
• Respond to security questionnaires from clients’ customers to support business growth.
• Write cybersecurity policy documents and assist with evidence collection for external compliance audits.
• Provide advice and guidance on a wide range of cybersecurity topics.
• Project‑manage client accounts to keep engagements on track.
• Contribute to service‑development initiatives to improve client deliverables.

Required profile

• At least 2 years of experience as a SOC analyst, developer, incident‑response remediator, technical auditor, IT administrator with security responsibilities, or a similar technical role.
• Passion for solving clients’ security challenges.
• High personal and professional ethical standards.
• Experience managing internal projects and initiatives.
• Strong technical writing abilities.

Required skills

• Security Operations (SOC) experience.
• Knowledge of security compliance frameworks such as SOC 2, ISO 27001, PCI‑DSS, HIPAA, TX‑RAMP.
• Secure Software Development Lifecycle (S‑SDLC) practices.
• System administration on Windows and Linux platforms.
• Cloud administration on AWS, Azure, and Google Cloud.
• Network or firewall administration.