About This Role
This Security GRC Support Analyst executes recurring governance, risk, compliance, vendor-risk, reporting, and security awareness work. The role organizes evidence, maintains accurate records, prepares first drafts and routine analyses, coordinates follow-up, and escalates exceptions or judgment-intensive matters, designed to operate effectively as an individual contractor, an offshore resource, or a human role supported by approved AI tools.
Responsibilities
- Provide reliable operational support across core Security GRC and security awareness activities
- Maintain policy inventories
- Track risks and remediation
- Coordinate vendor-security reviews
- Collect security evidence
- Support awareness campaigns and phishing simulations
- Prepare KPI/KRI reporting
- Support Microsoft Purview and other compliance activities
Requirements
- Working knowledge of security governance, risk, compliance, controls, or audit-support practices
- Strong written communication, document-quality control, organization, and follow-through
- Ability to work with structured trackers, ticketing systems, dashboards, questionnaires, and evidence repositories
- Ability to distinguish routine processing from matters requiring professional judgment or escalation
- Experience handling confidential business and security information in accordance with access and data-handling requirements
- Professional fluency in English and the ability to collaborate effectively across time zones and functions
- Ability to perform evidence collection and organization, tracker maintenance and routine follow-up, first-draft policies/reports/questionnaires/awareness content, data reconciliation and completeness checks, campaign administration and approved communications, and procedure documentation and workflow-improvement suggestions
Nice to have:
- Experience with NIST CSF, ISO/IEC 27001, SOC 2, third-party risk management, vulnerability remediation, or policy lifecycle management
- Experience supporting security awareness, phishing simulations, training administration, or employee communications
- Familiarity with tools such as Diligent One, UpGuard, Tenable, ServiceNow, Microsoft Purview, SharePoint, Excel, and reporting dashboards
- Experience using approved generative AI or workflow-automation tools for drafting, summarization, data preparation, or quality checks
Important Details
- Duration: 06 Months
- Role Type: Contract or managed support resource
- Reports To: Sr. Manager, Security GRC
About the Company
HonorVet Technologies is a Service Disable Veteran-Owned IT staffing firm, ISO 9001 and ISO 27001 certified, working with federal agencies, state governments, and Fortune 500 enterprise clients across the US. They take the time to understand where a professional is headed and only reach out when there is a genuine fit worth exploring.
