Remote GRC Analyst Jobs

What Does a GRC Analyst Do?

GRC (Governance, Risk, and Compliance) Analysts ensure organizations meet regulatory requirements and manage security risks effectively. They bridge the gap between technical security controls and business/regulatory requirements.

Key Responsibilities:

• Conduct risk assessments and maintain risk registers
• Manage compliance with regulations (SOC 2, HIPAA, GDPR, PCI-DSS)
• Develop and maintain security policies and procedures
• Coordinate internal and external security audits
• Track and report on security metrics
• Manage third-party vendor security assessments
• Support security awareness and training programs

Required Qualifications & Skills

• 2-4 years of experience in IT, security, or compliance
• Knowledge of security frameworks (NIST, ISO 27001, CIS)
• Understanding of regulatory requirements
• Strong written and verbal communication skills
• Experience with GRC tools preferred
• Attention to detail and organizational skills
• CISA, CRISC, or CGEIT certification valued

Key Skills:

Career Path

GRC Analyst Salary Guide

Based on 3 remote GRC Analyst jobs with disclosed salaries:

Open GRC Analyst Positions (7)