What are the responsibilities and job description for the GRC Analyst position at Glocomms?
Glocomms is partnered with a leading IT and Cloud Computing firm seeking an Information Security Governance, Risk & Compliance (GRC) Analyst to support and enhance the organization's security governance, risk management, and compliance programs. This individual will play a key role in identifying and managing information security risks, maintaining governance frameworks, overseeing third-party risk processes, and ensuring alignment with industry standards and regulatory requirements. The ideal candidate is a collaborative security professional who can effectively balance business objectives with risk management and compliance needs.
- Manage security governance, risk management, and compliance activities across the organization.
- Conduct risk assessments and maintain the enterprise risk register.
- Lead third-party and vendor risk assessment processes.
- Develop and maintain information security policies, standards, and procedures.
- Participate in security reviews, change management reviews, and risk discussions.
- Track security exceptions and support remediation efforts.
- Monitor compliance with security frameworks and regulatory requirements.
- Create risk reports, dashboards, and executive-level updates.
- Partner with engineering, legal, HR, operations, and business teams on security initiatives.
- Drive continuous improvement of governance and risk management processes.
- 5 years of experience in Information Security, GRC, Risk Management, Compliance, or Audit.
- Experience conducting security risk assessments and managing risk remediation activities.
- Knowledge of third-party risk management and vendor security reviews.
- Experience developing security policies, standards, and governance documentation.
- Familiarity with frameworks such as ISO 27001, SOC 2, NIST CSF, NIST 800-53, and CIS Controls.
- Experience with GRC platforms such as ServiceNow GRC, Archer, Vanta, Drata, or Hyperproof.
- Strong communication, documentation, and stakeholder management skills.
- Certifications such as CISM, CRISC, CISA, CISSP, or ISO 27001 certifications are preferred.
- Competitive base salary and annual bonus.
- Comprehensive medical, dental, and vision coverage.
- 401(k) with company match.
- Generous paid time off and company holidays.
- Flexible work environment, including hybrid or remote options where applicable.
Salary : $140,000 - $190,000