GRC Analyst

About This Role

Supporting the Information Security and Compliance team, the GRC Analyst helps ensure the organization meets internal policies, industry standards, and regulatory requirements. This entry-level opportunity suits a recent graduate or someone early in their IT/Security career looking to gain hands-on experience in cybersecurity governance, risk management, and compliance frameworks.

Responsibilities

• Assist in documenting and maintaining information security policies, procedures, and standards
• Help prepare for internal and external compliance audits (e.g., SOC 2, ISO 27001, GDPR, HIPAA, or PCI-DSS)
• Gather, organize, and track evidence required for compliance assessments
• Support the team in conducting routine information security risk assessments
• Assist in identifying, documenting, and tracking security risks in the company
• Follow up with internal teams on the status of risk remediation plans
• Review vendor security questionnaires and documentation to assess third-party risk
• Maintain the repository of approved vendors and track renewal/re-assessment dates
• Assist in administering the company
• Help compile data and metrics for weekly or monthly GRC dashboards and reports

Requirements

• 0-1 years of experience