Cyber GRC Analyst: Policy, Risk & Audit Support

Clinisoltech; Dallas (TX); On-site; USD 80,000 - 90,000; Full time

Job summary

Clinisol Tech Inc. is seeking a Cyber Security GRC Analyst to support governance, risk and compliance initiatives across the organization. You will help manage security frameworks, support audit readiness, conduct risk assessments, and ensure regulatory posture.

The role collaborates with IT, Security and business units to develop policies, evidence, and remediation plans, enhancing security maturity and alignment with standards.

Qualifications

• Bachelor's degree in Cyber Security, IT, Information Systems, or related field.
• 4+ years of IT Audit, GRC, Compliance, or Risk Management.
• Working knowledge of NIST CSF / 800-53, ISO 27001, SOC 2 and related frameworks.
• Experience supporting audits, compliance initiatives, and policy management.
• Strong organizational, analytical, communication, and problem-solving skills.

Responsibilities

• Support control testing and evidence collection for NIST, ISO 27001, and SOC 2.
• Experience with GRC platforms such as ServiceNow GRC/IRM, RSA Archer, or OneTrust.
• Conduct compliance gap assessments and track remediation activities.
• Develop and maintain security policies, standards, and compliance documentation.
• Perform third-party and vendor risk assessments.
• Collaborate with IT, Security, and business teams during audit and compliance activities.
• Prepare audit-ready documentation, reports, and compliance evidence.

Skills

GRC frameworks

Audit readiness

Policy management

Vendor risk

Communication skills

Education

Bachelor's degree in Cyber Security, IT, Information Systems, or related field

Tools

ServiceNow GRC/IRM

RSA Archer

OneTrust

Job description

Clinisol Tech Inc. is seeking a Cyber Security GRC Analyst to support governance, risk and compliance initiatives across the organization. You will help manage security frameworks, support audit readiness, conduct risk assessments, and ensure regulatory posture.

The role collaborates with IT, Security and business units to develop policies, evidence, and remediation plans, enhancing security maturity and alignment with standards.