GRC Analyst
Skills
- Experience with risk assessments, risk registers, and mitigation tracking
- Familiarity with compliance frameworks such as SOC 2, ISO 27001, HIPAA, and FedRAMP
- Proven audit support and evidence collection skills
- Strong organizational skills, attention to detail, and documentation discipline
- Excellent cross-functional communication and stakeholder management
- Ability to build risk reporting and KPIs for leadership visibility
- Basic understanding of information security principles and controls
Responsibilities
- Maintain and update the organizational risk register through ongoing risk reviews
- Conduct risk assessments for business processes and systems and document findings
- Partner with stakeholders to develop, track, and close risk mitigation plans
- Build and deliver risk metrics and executive-level reporting
- Monitor adherence to regulatory frameworks and internal controls (SOC 2, HIPAA, ISO 27001, FedRAMP)
- Coordinate evidence collection and documentation to support audit readiness and certification efforts
- Partner with cross-functional teams to achieve successful audit outcomes with no material findings
- Review and update GRC-related policies on a regular cadence
- Support or lead compliance and security training and awareness initiatives
- Maintain secure documentation for audits, investigations, and post-incident reviews
Education
- Bachelor’s degree in Business, Information Security, Risk Management, or related field, or equivalent experience
- Relevant professional certifications are a plus (CISSP, CISM, CISA, CRISC)
Benefits
- Unlimited PTO policy
- Competitive medical, dental, and vision coverage
- 401(k) matching
- Paid holidays
- Volunteer time off
- Paid parental leave
- Remote work stipend
- Compensation range: $100,000 - $120,000
Average salary estimate
If an employer mentions a salary or salary range on their job, we display it as an "Employer Estimate". If a job has no salary data, Rise displays an estimate if available.
Senior Counsel, Commercial Transactions needed to lead and scale technology and vendor contracting for a fast-evolving media company, with a special focus on generative AI legal issues.
Support NBCUniversal's State & Local Government Affairs team in New York by conducting legislative research, preparing reports, and assisting with events while gaining hands-on experience in media-focused public affairs.
NBCUniversal seeks JD-level academic-year legal interns to support Music Business & Legal Affairs with music rights research, contract drafting, and transactional legal work.
Kalshi is seeking a Compliance professional to manage policy and controls operations across its DCM and DCO entities, administer the GRC platform, and support CFTC exam and audit readiness.
🔮
Hi, I'm Risa! Your AI Career Copilot
you, just ask me below!
