GRC Analyst

About This Role

This GRC Analyst role is key to advancing the organization's Governance, Risk, and Compliance program. The position ensures compliance with internal policies and external regulations, manages third-party risks, and supports audits aligned with frameworks such as SOC 2, ISO 27001, and DORA. The analyst will maintain risk documentation, respond to security questionnaires, and collaborate across departments to uphold the company's security and compliance posture.

Responsibilities

• Monitor compliance with internal and external requirements and report status to leadership
• Coordinate responses to customer RFPs and security/vendor questionnaires
• Support third-party risk management through assessments and vendor monitoring
• Maintain the risk register and track remediation progress
• Assist in developing and updating GRC policies and procedures
• Lead audits and assessments against SOC 2, ISO 27001, and DORA, including evidence collection and remediation tracking

Requirements

• Bachelor’s degree in Information Security, Computer Science, Business, or related field, or equivalent experience
• Minimum of 4 years’ experience in GRC, IT audit, information security, or related compliance roles
• Knowledge of SOC 2, ISO 27001, and DORA requirements
• Experience with risk management tools, Trust Centers, GRC platforms, and ticketing systems
• Strong written communication skills for policy drafting and reporting
• Ability to work independently and manage multiple concurrent projects

Benefits

• Medical insurance
• Dental insurance
• 401(k)

About the Company

The organization operates in the virtual desktop infrastructure and end-user computing industry, providing solutions that enhance work environment speed and security across desktop, cloud, on-prem, and hybrid settings. Serving millions of users globally since 1999, the company focuses on delivering a broad portfolio of applications that support connected knowledge workers, aiming to optimize their productivity and security.