Cybersecurity Governance , Risk and Compliance Analyst

About the Role

Seeking a practical, organized, and collaborative Cybersecurity Governance, Risk & Compliance (GRC) Analyst to support our cybersecurity governance, risk management, and compliance program. You will work with cybersecurity, infrastructure, business and third-party vendor owners to help keep security requirements on track, documentation current, audit-ready evidence, and identified risks visible to management.

Responsibilities

• Maintain and improve cybersecurity policies, standards, procedures, templates, and supporting documentation.
• Help coordinate recurring and change-driven cybersecurity compliance activities, including assigning actions, tracking due dates, and following up with responsible teams.
• Review documentation to control mapping evidence for completeness, accuracy, consistency, and audit readiness.
• Maintain audit records, including control matrices, roles & responsibilities, risk registers and exception records, and remediation trackers.
• Work with technical and business teams to interpret security audit requirements and help ensure controls are implemented consistently.
• Prepare clear compliance status updates covering open gaps, overdue actions, upcoming obligations, exceptions, and remediation progress.

Required Qualifications

• Two or more years of relevant experience in managing cybersecurity governance, audit, third-party risk, security controls, or a related field.
• Working knowledge of at least one cybersecurity or compliance framework, such as PCI DSS, ISO 27001, the NIST Cybersecurity Framework, SOC 2, or applicable privacy requirements.
• General understanding of common IT and cybersecurity controls in at least one of the areas, such as access management, vulnerability management, change management, incident response, data protection, logging, cloud security, and third-party oversight.
• Strong written communication skills, including the ability to produce clear procedures, assessment res