GRC Compliance Specialist

Job Description

We are seeking a detail-oriented and proactive GRC Compliance Specialist to join our Governance, Risk, and Compliance (GRC) team. In this role, you will help ensure the organization’s compliance with regulatory requirements, industry standards, and internal security policies. You will collaborate with Information Security, IT, Legal, Privacy, Risk Management, and Business teams to assess compliance, identify control gaps, support audits, and implement continuous improvements across governance and risk management programs.

The ideal candidate has experience with cybersecurity frameworks, regulatory compliance, risk assessments, and audit support. Strong analytical skills, attention to detail, and excellent communication abilities are essential for success in this role.

Key Responsibilities

• Manage and maintain enterprise compliance programs aligned with business objectives.
• Conduct compliance assessments against frameworks including ISO/IEC 27001, NIST Cybersecurity Framework (CSF), NIST SP 800-53, SOC 2, PCI DSS, HIPAA, SOX, GDPR, CCPA, and CIS Controls.
• Perform regulatory gap assessments and develop remediation plans.
• Maintain governance documentation, policies, standards, procedures, and control libraries.
• Coordinate internal and external compliance audits, including evidence collection and audit readiness.
• Track remediation activities and monitor corrective action plans until closure.
• Support enterprise risk assessments and maintain organizational risk registers.
• Conduct third-party/vendor risk assessments and review supplier security documentation.
• Monitor regulatory and industry changes to ensure ongoing compliance.
• Collaborate with technical teams to implement security and compliance controls.
• Prepare executive dashboards, compliance reports, and risk metrics for leadership.
• Assist with customer security questionnaires and compliance requests.
• Participate in security awareness and compliance training initiatives.
• Support continuous improvement of governance and compliance processes.
• Utilize GRC platforms to manage compliance workflows, risks, and audit activities.

Required Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Information Systems, Computer Science, Risk Management, Business Administration, or a related field.
• 2–5+ years of experience in Governance, Risk & Compliance (GRC), Information Security, IT Audit, or Regulatory Compliance.
• Strong understanding of cybersecurity governance principles and compliance frameworks.
• Experience supporting internal and external audits.
• Knowledge of enterprise risk management methodologies.
• Excellent analytical, organizational, and documentation skills.
• Strong written and verbal communication skills.
• Ability to manage multiple compliance projects simultaneously.

Preferred Qualifications

• Professional certifications such as:
  • Certified Information Systems Auditor (CISA)
  • Certified Information Systems Security Professional (CISSP)
  • Certified in Risk and Information Systems Control (CRISC)
  • Certified Information Security Manager (CISM)
  • ISO/IEC 27001 Lead Implementer or Lead Auditor
• Experience working in regulated industries such as healthcare, finance, government, or cloud technology.
• Familiarity with cloud security compliance for AWS, Microsoft Azure, or Google Cloud Platform (GCP).
• Experience with automated GRC platforms and compliance tools.

Technical Skills

• Governance, Risk & Compliance (GRC)
• Enterprise Risk Management (ERM)
• Regulatory Compliance
• Risk Assessments
• Internal Controls
• Policy and Procedure Management
• Audit Management
• Third-Party Risk Management
• Security Control Assessments
• Compliance Reporting
• Vendor Risk Analysis
• Business Continuity Planning
• Disaster Recovery
• Security Awareness Programs
• Documentation Management

Preferred Tools

• ServiceNow GRC
• RSA Archer
• OneTrust
• MetricStream
• AuditBoard
• LogicGate
• Drata
• Vanta
• Microsoft Purview
• Microsoft Defender
• Microsoft Sentinel
• Splunk
• Jira
• Confluence
• Power BI
• Microsoft Excel
• AWS
• Microsoft Azure
• Google Cloud Platform (GCP)

Benefits

• Competitive salary and annual performance bonus
• Medical, dental, and vision insurance
• Paid time off and company holidays
• Flexible remote/hybrid work options
• Professional development and certification reimbursement
• Career advancement opportunities
• Employee wellness programs
• Collaborative and inclusive work environment