GRC Analyst

A company is looking for a GRC Analyst.

Key Responsibilities

Lead SOC2 Type II compliance, including risk assessments, audits, and evidence collection

Build scalable processes for governance, risk, and compliance, including responding to customer security questionnaires

Drive security tooling implementation and manage incident response and risk mitigation efforts

Required Qualifications

5+ years of experience in security engineering, compliance, or security operations

Hands-on experience with SOC2 Type II audits

Strong background in vulnerability management and endpoint security

Familiarity with MDMs, antivirus tools, and web security best practices

Experience working with GRC teams and responding to enterprise security questionnaires