GRC Analyst
Posted Updated
Description
<p class="MsoNormal" style="margin-bottom:0cm;"><b><span lang="en-us" xml:lang="en-us">Job Overview</span></b></p><p></p>
<p class="MsoNormal" style="margin-bottom:0cm;"><span lang="en-us" xml:lang="en-us">We are looking
for a detail-oriented and proactive GRC Analyst to join our growing security
and compliance team. In this role, you will be responsible for maintaining and
advancing our compliance posture across multiple regulatory frameworks,
including SOC 2, HIPAA, FERPA, ISO 27001/27701/42001, TX-RAMP, and GDPR. You
will work closely with our security, engineering and other teams to ensure our
platform and operations meet the compliance regulations - critical to our
position as a trusted leader in educational and healthcare organizations.</span></p><p class="MsoNormal" style="margin-bottom:0cm;"><span lang="en-us" xml:lang="en-us"><br /></span></p><p class="MsoNormal" style="margin-bottom:0cm;"><span lang="en-us" xml:lang="en-us"><br /></span></p><p class="MsoNormal" style="margin-bottom:0cm;"><b><span lang="en-us" xml:lang="en-us">Responsibilities</span></b></p><p></p><ul><li style="margin-bottom:0cm;"><span lang="en-us" xml:lang="en-us">Evaluate
compliance alignment for SOC 2, HIPAA, ISO 27001, ISO 27701, ISO 42001,
TX-RAMP, and GDPR, ensuring continuous audit readiness.</span><p></p></li><li style="margin-bottom:0cm;"><span lang="en-us" xml:lang="en-us">Perform internal
gap assessments and readiness evaluation against applicable frameworks and
standards, track remediation plans.</span><p></p></li><li style="margin-bottom:0cm;"><span lang="en-us" xml:lang="en-us">Monitor the
Information Security Management System (ISMS) and Artificial Intelligence
Management System (AIMS) KPIs and objectives in alignment with ISO 27001 and
ISO 42001 requirements.</span><p></p></li><li style="margin-bottom:0cm;"><span lang="en-us" xml:lang="en-us">Coordinate
internal and external compliance audits - prepare evidence packages, manage
auditor requests, and drive timely closure of audit findings.</span><p></p></li><li style="margin-bottom:0cm;"><span lang="en-us" xml:lang="en-us">Monitor control
documentation for internal and external audits.</span><p></p></li><li style="margin-bottom:0cm;"><span lang="en-us" xml:lang="en-us">Collaborate with
engineering, product, and DevOps teams to embed compliance requirements into
the SDLC and cloud infrastructure.</span><p></p></li><li style="margin-bottom:0cm;"><span lang="en-us" xml:lang="en-us">Track, measure,
and report key compliance metrics and KPIs on a regular basis.</span><p></p></li><li style="margin-bottom:0cm;"><span lang="en-us" xml:lang="en-us">Support
client-facing compliance activities, including responding to questionnaires,
RFPs, and Third Party Risk Management (TPRM) inquiries from clients and
prospects.</span></li></ul><p class="MsoNormal" style="margin-bottom:0cm;"><b><span lang="en-us" xml:lang="en-us"><br /></span></b></p><p class="MsoNormal" style="margin-bottom:0cm;"><b><span lang="en-us" xml:lang="en-us">Profile Requirement</span></b></p><p></p><ul><li style="margin-bottom:0cm;"><span lang="en-us" xml:lang="en-us">Bachelor’s degree in information security, Computer Science, Information Systems, or a related
field.</span><p></p></li><li style="margin-bottom:0cm;"><span lang="en-us" xml:lang="en-us">3 - 5 years of
experience in information security compliance, GRC, or a closely related role.</span><p></p></li><li style="margin-bottom:0cm;"><span lang="en-us" xml:lang="en-us">Hands-on,
demonstrable experience with two or more of the following frameworks: SOC 2,
HIPAA, ISO 27001, ISO 27701, ISO 42001, TX-RAMP, GDPR.</span><p></p></li><li style="margin-bottom:0cm;"><span lang="en-us" xml:lang="en-us">Experience
coordinating or supporting audit readiness, evidence collection, and external
auditor engagements.</span><p></p></li><li style="margin-bottom:0cm;"><span lang="en-us" xml:lang="en-us">Appropriate
analytical, documentation, and communication skills - translate technical
compliance requirements into clear guidance for both technical and
non-technical audiences.</span></li><li style="margin-bottom:0cm;"><span lang="en-us" xml:lang="en-us">Ability to work
cross-functionally and support concurrent compliance initiatives.</span></li></ul><p class="MsoNormal" style="margin-bottom:0cm;"><b><span lang="en-us" xml:lang="en-us"><br /></span></b></p><p class="MsoNormal" style="margin-bottom:0cm;"><b><span lang="en-us" xml:lang="en-us">Good to Have</span></b></p><p></p><ul><li style="margin-bottom:0cm;"><span lang="en-us" xml:lang="en-us">Relevant
compliance certifications such as ISO 27001 Lead Implementer/Auditor or
similar.</span><p></p></li><li style="margin-bottom:0cm;"><span lang="en-us" xml:lang="en-us">Understanding of
governance frameworks like NIST SP 800-53/ CMF/ RMF.</span></li><li style="margin-bottom:0cm;"><span lang="en-us" xml:lang="en-us">Prior experience
in a health-tech, edtech SaaS environment.</span></li></ul><p style="margin-bottom:0cm;"><span lang="en-us" xml:lang="en-us"><br /></span></p><p class="MsoNormal" style="margin-bottom:0cm;"></p><p class="MsoNormal" style="margin-bottom:0cm;"><span lang="en-us" xml:lang="en-us"> </span></p><p class="MsoNormal" style="margin-bottom:0cm;"></p><p></p>