Senior GRC Analyst

Job Summary

A company is looking for a Senior Governance, Risk, and Compliance (GRC) Analyst to strengthen its compliance strategy and execution.

Key Responsibilities

• Assist in FedRAMP certification efforts, including gap analysis and documentation development
• Support continuous compliance with SOC 2 requirements through evidence collection and audit coordination
• Establish and manage a vendor risk assessment program, evaluating security controls and compliance posture

Required Qualifications

• 8+ years of experience in IT compliance, security, or risk management
• Demonstrated experience with FedRAMP certification processes
• Hands-on experience with ISO 27001 compliance
• Strong knowledge of SOC 2 compliance frameworks
• Experience conducting vendor security assessments and risk analyses