100% Remote - Governance Risk and Compliance (GRC) Analyst - Contract to Hire
Posted 2026-05-05
Remote, USA
Full-time
Immediate Start
100% Remote
Contract to Hire role
- Key Responsibilities
- Support the design, execution, and continuous improvement of Governance, Risk, and Compliance (GRC) programs across IT and business processes
- Perform IT risk assessments, identify control gaps, and assist with remediation planning and tracking
- Support SOX ITGCs, SOC, and internal audits, including walkthroughs, testing coordination, evidence collection, and audit response management
- Evaluate and document control design and operating effectiveness for access, change management, and IT operations controls
- Support access governance activities, including user access reviews, role reviews, segregation of duties (SoD) analysis, and exception tracking
- Assist with policy, standard, and procedure development, ensuring alignment with regulatory and industry requirements
- Track and manage risk issues, audit findings, and remediation actions, ensuring appropriate ownership and timely closure
- Support third-party and contractor access governance, including risk assessments and periodic reviews
- Maintain accurate and audit-ready documentation, risk registers, control matrices, and compliance artifacts
- Communicate risk, control gaps, and compliance requirements clearly to technical and non-technical stakeholders
- Core Skills
- IT Audit & Controls
- Access & Identity Governance
- Risk Assessment & Remediation
- Policy & Control Documentation
- Tools/Frameworks
- NIST/COBIT/RMF/CSF
- Experience with GRC tools (ServiceNow GRC, Archer, SecurEnds, Saviynt, etc.)
- Required Qualifications
- Bachelor’s degree
- 3-5+ years of experience in GRC, IT Risk, Compliance, or Audit
- Strong understanding of IT general controls (access, change, operations)
- Experience supporting audits and compliance reviews
- SOX Experience
- SOC Experience
- NYSDFS Experience (New York State Department of Financial Services)
- FLOIR Experience (Florida Office of Insurance Regulation (OIR))
- Strong documentation and communication skills
Remote
About the Company:
Experienced Recruiting Partners