Security Governance, Risk & Compliance Analyst (GRC Analyst)
Direct Hire
Detroit (hybrid after 30-days) >
LOCAL candidates will only be considered
US or Green Card may only be considered
Were seeking an experienced Information Security Governance, Risk & Compliance Analyst to strengthen our IT Security program. This role is ideal for a proven GRC professional with hands-on expertise in regulatory compliance, risk assessments, and enterprise security frameworks.
Ideal Profile Highlights :
- 10+ years in Information Security GRC across regulated industries
- Expertise in NIST, ISO 27001, SOX, GLBA, GDPR, and audit coordination
- Strong operational experience with Azure, O365, CrowdStrike, Mimecast, ZenGRC, Archer, KnowBe4
- Proven leader with excellent technical writing and cross-functional collaboration skills
- Certifications : CIPP / US, CIPM, CDPSE, ISO 27001 Internal Auditor
Key Responsibilities :
Monitor regulatory changes and ensure compliance alignmentConduct enterprise risk assessments and manage remediationSupport audit readiness and evidence documentationDevelop and enhance governance policies and incident response plansDeliver GRC reporting to IT & business leadershipHybrid schedule after 30 days