G&C Analyst

To Apply for this Job Click Here

Job Title: G&C Analyst
Employment Type: Contract

Job Summary:
We are seeking a detail-oriented and proactive G&C (Governance & Compliance) Analyst to support annual maturity assessments and assist with the implementation of a new GRC platform. This role requires a strong foundation in IT control frameworks, experience working with GRC systems, and the ability to manage small-scale compliance initiatives independently. The ideal candidate is organized, articulate, and capable of engaging with stakeholders to assess and document the status of enterprise controls.

Responsibilities:

• Lead the annual maturity assessment process:
  • Coordinate stakeholder outreach
  • Organize and manage control data via spreadsheets
  • Facilitate conversations regarding control effectiveness and support
• Support the implementation of a new GRC system
  • Gather business and technical requirements
  • Assist in documentation and adoption efforts
• Evaluate and monitor the status of IT general controls, endpoint controls, and compliance alignment
• Collaborate with internal risk, audit, and security teams to ensure continuous improvement in governance practices
• Track remediation progress and verify resolution of identified gaps
• Maintain structured documentation to support transparency and audit readiness
• Stay informed on changes in regulatory requirements and GRC trends impacting IT risk and compliance

Qualifications:

• Bachelor’s degree in Information Systems, Cybersecurity, Accounting, or related field
• 5+ years of experience in GRC, IT compliance, or IT audit roles
• Familiarity with GRC frameworks such as COBIT, NIST, ISO 27001, and SOX
• Strong organizational and communication skills; able to manage independent, project-based work
• Understanding of endpoint control concepts
• Experience or exposure to GRC tools (e.g., ServiceNow GRC, RSA Archer, LogicGate, MetricStream, NAVEX, etc.)
• Ability to work across cross-functional teams to drive control assessments and improvements
• Preferred certifications: CISA, CISSP, CRISC, or similar

Preferred Skills:

• Experience supporting or implementing GRC platforms
• Understanding of cloud environments (AWS, Azure, or GCP)
• Prior experience managing self-directed compliance projects
• Exposure to cybersecurity controls or risk management functions

To Apply for this Job Click Here