Governance, Risk, and Compliance Analyst

GRC Analyst

Help build strong security programs, not just check compliance boxes.

ACC Technical Services is seeking a GRC Analyst to support our internal cybersecurity governance program and help clients navigate increasingly complex security and compliance requirements.

What You’ll Do

• Maintain ACC’s GRC programs aligned with NIST CSF 2.0, CIS Controls v8.1 and SOC 2.
• Gather, organize, validate, and maintain control evidence so programs remain continuously assessment-ready.
• Maintain control mappings, findings, exceptions, remediation records, and risk registers.
• Perform vendor / third-party risk assessments and coordinate due diligence.
• Coordinate ACC enterprise cybersecurity risk assessments.
• Perform and maintain client CIS RAM risk assessments.
• Help clients prepare for HITRUST CSF, CMMC, DFARS, and NIST SP 800-171 requirements, as applicable.
• Conduct readiness and gap assessments, document findings, and help create prioritized remediation plans.
• Work with ACC security and technical SMEs to validate control implementation and evidence.
• Help clients create and maintain the policies, procedures, plans, registers, evidence, and other documentation needed to demonstrate their security program.
• Support client interactions with auditors, assessors, customers, and other authorized reviewers while maintaining appropriate independence boundaries.

What We’re Looking For

• A practical GRC professional who understands that effective compliance starts with effective security and risk management.
• Working knowledge of NIST CSF 2.0 and CIS Controls.
• Understanding of SOC 2 controls, evidence, and audit readiness.
• Understanding of cybersecurity risk assessment and risk treatment.
• Strong writing, documentation, evidence-management, and organizational skills.
• Ability to communicate effectively with both technical staff and business leaders.
• Comfort working directly with clients and translating framework requirements into achievable actions.

Experience That Will Stand Out

• HITRUST CSF readiness or assessment-support experience.
• CMMC and NIST SP 800-171 readiness experience.
• DFARS cybersecurity compliance experience.
• CIS RAM risk-assessment experience.
• Vendor / third-party risk management.
• SOC 2 readiness or audit support.
• GRC platform administration.
• Experience working for or with an MSP, MSSP, IT services provider, healthcare organization, defense contractor, or regulated business.

Certifications We Value

Relevant certifications are a plus, including ISC2 CC or CGRC, ISACA CRISC or CISA, CompTIA Security , and appropriate CIS, NIST, HITRUST, CMMC, audit, or risk-management credentials.

How This Role Fits at ACC

This is not primarily a hands-on security engineering role. You will partner with ACC’s technical Subject Matter Experts, who operate and implement technical controls. Your focus will be governance, requirements, risk, evidence, assessment, documentation, remediation tracking, and helping ACC and our clients demonstrate that security controls are working as intended.

Why This Role Matters

You will help turn cybersecurity frameworks into sustainable operating programs. The right candidate will make evidence easier to find, risks easier to understand, remediation easier to manage, and compliance efforts more useful to the business.

ACC Technical Services is an equal opportunity employer. Employment decisions are based on business needs, job requirements, and individual qualifications.

Pay: $72,000.00 - $90,000.00 per year

Benefits:

• 401(k)
• 401(k) matching
• Dental insurance
• Health insurance
• Paid time off

Work Location: In person

Salary : $72,000 - $90,000