GRC Analyst

Glocomms is partnered with a leading IT and Cloud Computing firm seeking an Information Security Governance, Risk & Compliance (GRC) Analyst to support and enhance the organization's security governance, risk management, and compliance programs. This individual will play a key role in identifying and managing information security risks, maintaining governance frameworks, overseeing third-party risk processes, and ensuring alignment with industry standards and regulatory requirements. The ideal candidate is a collaborative security professional who can effectively balance business objectives with risk management and compliance needs.

Responsibilities

• Manage security governance, risk management, and compliance activities across the organization.
• Conduct risk assessments and maintain the enterprise risk register.
• Lead third-party and vendor risk assessment processes.
• Develop and maintain information security policies, standards, and procedures.
• Participate in security reviews, change management reviews, and risk discussions.
• Track security exceptions and support remediation efforts.
• Monitor compliance with security frameworks and regulatory requirements.
• Create risk reports, dashboards, and executive-level updates.
• Partner with engineering, legal, HR, operations, and business teams on security initiatives.
• Drive continuous improvement of governance and risk management processes.

Qualifications

• 5+ years of experience in Information Security, GRC, Risk Management, Compliance, or Audit.
• Experience conducting security risk assessments and managing risk remediation activities.
• Knowledge of third-party risk management and vendor security reviews.
• Experience developing security policies, standards, and governance documentation.
• Familiarity with frameworks such as ISO 27001, SOC 2, NIST CSF, NIST 800-53, and CIS Controls.
• Experience with GRC platforms such as ServiceNow GRC, Archer, Vanta, Drata, or Hyperproof.
• Strong communication, documentation, and stakeholder management skills.
• Certifications such as CISM, CRISC, CISA, CISSP, or ISO 27001 certifications are preferred.

Benefits

• Competitive base salary and annual bonus.
• Comprehensive medical, dental, and vision coverage.
• 401(k) with company match.
• Generous paid time off and company holidays.
• Flexible work environment, including hybrid or remote options where applicable.