Governance, Risk, & Compliance (GRC) Analyst
districttechgroupAndrews Air Force Base (MD)
Governance, Risk, & Compliance (GRC) Analyst
Posted 2 days ago
districttechgroupAndrews Air Force Base (MD)
SENIORITY
Senior
About the role
Governance, Risk, & Compliance (GRC) Analyst Washington, DC Remote Full-TimeAbout This RoleAs a GRC Analyst, you will help organizations navigate the complex landscape of cybersecurity compliance and risk management. You will work directly with clients to assess their security posture, develop policies, and guide them through compliance frameworks including HIPAA, SOC 2, NIST, and more.
Responsibilities:
- Conduct security assessments and gap analyses against compliance frameworks
- Develop and maintain security policies, procedures, and documentation
- Support clients through SOC 2, HIPAA, and other compliance audits
- Perform risk assessments and develop risk treatment plans
- Create and deliver compliance reports and executive summaries
- Assist with vendor security questionnaire responses
- Stay current on regulatory changes and industry best practices
- Collaborate with technical teams to implement security controls
Qualifications:
- 2+ years of experience in GRC, compliance, or information security
- Strong knowledge of compliance frameworks (SOC 2, HIPAA, NIST CSF, ISO 27001)
- Experience conducting security assessments and audits
- Excellent documentation and technical writing skills
- Strong understanding of security controls and risk management principles
- Ability to communicate complex concepts to non-technical stakeholders
- Detail-oriented with strong organizational skills
- Bachelor's degree in Cybersecurity, Information Systems, or related field
Preferred Qualifications+ GRC certifications (CISA, CRISC, CGRC, or equivalent)+ Experience with GRC platforms (ServiceNow, OneTrust, ControlMap)+ Healthcare or financial services industry experience+ Knowledge of cloud compliance (FedRAMP, SOC 2 for SaaS)+ Experience with privacy regulations (GDPR, CCPA)
What We Offer★ Fully remote work environment★ Competitive salary and performance bonuses★ Health, dental, and vision insurance★ Professional development and certification support★ Mentorship from industry-leading security experts
Before you apply
Applying takes about a minute. These four things decide how fast it moves after that.
Your profile is current
It's what we read first. Occupations, seniority and locations matter more than a long history.
Two examples you can talk through
Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.
A number in mind
What you're on now and what would make you move. We negotiate better when we know both.
Your notice period
Employers plan around it, and it's the question that stalls offers most often.
Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.