Cybersecurity GRC Analyst

duvari group; Fenton (MO); On-site; USD 83,000 - 131,000; Full time

Job summary

duvari group is seeking an experienced Cybersecurity GRC Analyst for a 6-month engagement to support our security compliance and governance initiatives. The role focuses on ISO 27001 audits, policy development, risk assessments, and control implementation.

You will collaborate with technical and business teams to ensure controls are properly implemented, document evidence, and track remediation progress, delivering clear status reports throughout the engagement.

Qualifications

• Proven experience with ISO 27001 frameworks and audits.
• Strong understanding of cybersecurity governance, risk, and compliance practices.
• Ability to manage documentation, evidence collection, and cross-functional communication.
• Excellent attention to detail and organizational skills.

Responsibilities

• Support ISO 27001 certification, audits, and continuous compliance activities
• Perform risk assessments and assist with remediation planning
• Review, update, and maintain security policies, standards, and procedures
• Coordinate with technical and business teams to ensure controls are properly implemented
• Track and report on compliance status and remediation progress

Skills

ISO 27001 audits

Governance, risk & compliance

Documentation management

Cross-functional communication

Attention to detail

Job description

We are seeking an experienced Cybersecurity GRC Analyst for a 6-month engagement to support our ongoing security compliance and governance initiatives. The ideal candidate will have strong hands-on experience with ISO 27001, including audit support, policy development, risk assessments, and control implementation.

Responsibilities:

• Support ISO 27001 certification, audits, and continuous compliance activities

• Perform risk assessments and assist with remediation planning

• Review, update, and maintain security policies, standards, and procedures

• Coordinate with technical and business teams to ensure controls are properly implemented

• Track and report on compliance status and remediation progress

Qualifications:

• Proven experience working with ISO 27001 frameworks and audits

• Strong understanding of cybersecurity governance, risk, and compliance practices

• Ability to manage documentation, evidence collection, and cross-functional communication

• Excellent attention to detail and organizational skills