GRC Analyst

Job Description

A client of Insight Global is seeking a Governance, Risk and Compliance (GRC) Analyst to support IT Security compliance requirements and organizational risk tolerance. This role ensures the implementation of effective security processes and controls aligned with corporate and regulatory standards. The analyst will support the security compliance program, track remediation activities, and maintain documentation of compliance evidence. Responsibilities include coordinating internal and external compliance efforts, supporting internal audits, managing vulnerability and identity reviews, and contributing to security awareness initiatives. The ideal candidate will possess strong technical knowledge, excellent communication skills, and the ability to work collaboratively across departments in a fast-paced environment.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity / affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and / or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to HR@insightglobal.com.To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy :

Skills and Requirements

3+ years of experience in an IT role focusing on information security and IT compliance

Knowledge of regulatory compliance regulations (PCI, SOX, PII)

Familiarity with industry standard frameworks such as NIST, ISO 2700x, CIS

Experience with GRC tools (Oracle, RSA Archer, MetricStream, etc.)

Bachelor's degree in Computer Science, Information Technology, or a relevant field, or equivalent experience

Strong familiarity with PCI and SOX security requirements and controls CISA or CISSP certification

MSCE, CISM, and other technical certifications