Governance, Risk, and Compliance (GRC) Analyst
prolimAustin (TX)
Governance, Risk, and Compliance (GRC) Analyst
Posted today
prolimAustin (TX)
SENIORITY
Lead
About the role
Job Title: Governance, Risk, and Compliance (GRC) Analyst
Key Responsibilities:
Governance Develop, maintain, and enforce IT security policies, standards, and procedures.
Support internal governance frameworks and ensure alignment with industry best practices.
Assist in the implementation of security awareness programs.
Risk Management:
Identify, assess, and monitor IT and business risks.
Conduct risk assessments and recommend mitigation strategies.
Maintain risk registers and track remediation efforts.
Compliance:
Ensure compliance with regulatory requirements (e.g., GDPR, HIPAA, ISO 27001, SOX).Coordinate internal and external audits and support audit readiness. Monitor and report on compliance status and gaps.
Control Implementation:
Work with cross-functional teams to implement technical and administrative controls. Evaluate the effectiveness of existing controls and recommend improvements.
Reporting & Documentation:
Prepare reports for management on risk posture, compliance status, and audit findings. Maintain documentation related to policies, procedures, and compliance activities.
Required Skills & Qualifications:
Strong experience in GRC, IT audit, or cybersecurity.
Strong understanding of regulatory frameworks and standards (e.g., NIST, ISO, COBIT).Experience with GRC tools (e.g., RSA Archer, ServiceNow GRC, MetricStream).Excellent analytical, communication, and documentation skills.
Certifications such as CISA, CRISC, CISSP, or ISO 27001 Lead Implementer are a plus.
Before you apply
Applying takes about a minute. These four things decide how fast it moves after that.
Your profile is current
It's what we read first. Occupations, seniority and locations matter more than a long history.
Two examples you can talk through
Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.
A number in mind
What you're on now and what would make you move. We negotiate better when we know both.
Your notice period
Employers plan around it, and it's the question that stalls offers most often.
Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.