Cybersecurity/GRC Compliance Analyst - onsite only

Crawford Thomas Recruiting; Orlando (FL); Sur place; USD 80 000 - 125 000; Plein temps

Résumé du poste

Crawford Thomas Recruiting is seeking a Cybersecurity/GRC Compliance Analyst for an onsite role in Orlando, FL. The ideal candidate has 5+ years in cybersecurity compliance and will support audits, control testing, risk assessments, and remediation across multiple frameworks.

The position requires strong collaboration with IT, Security, and Engineering teams, and experience with vendor risk, SSPs, and continuous monitoring is a plus. This is a full-time, direct-hire opportunity.

Qualifications

• 5+ years in cybersecurity compliance, IT audit, risk, information security, or regulatory compliance.
• Experience with SOC 2 and ISO 27001.
• Exposure to NIST 800-171, FedRAMP, HIPAA, PCI DSS, DoD, GDPR, or similar frameworks.
• Experience supporting audits, identifying control gaps, and driving remediation.
• Experience with vendor risk, control mapping, SSPs, POA&Ms, or continuous monitoring.
• Strong communication skills with both technical and non-technical teams.
• Bachelor’s degree or equivalent professional experience.
• Stable work history with meaningful tenure in previous roles.

Responsabilités

• Support SOC 2, ISO 27001, NIST 800-171, FedRAMP, and other compliance initiatives.
• Coordinate audit evidence, documentation, control validation, and auditor requests.
• Test controls, identify compliance gaps, and track remediation.
• Conduct risk assessments and maintain audit-ready policies and documentation.
• Partner with IT, Security, and Engineering on technical security controls.
• Support vendor risk reviews and customer compliance requests.

Connaissances

Cybersecurity compliance

IT audit

Risk assessment

Regulatory compliance

SOC 2

ISO 27001

Vendor risk

Control mapping

POA&Ms

Continuous monitoring

Communication

Formation

Bachelor's degree or equivalent

Description du poste

Cybersecurity/GRC Compliance Analyst

Location:

100% Onsite – Candidates must already reside within commuting distance of the Orlando, FL 32810 office.

Salary:

$80,000–$100,000 base + 25% bonus

Employment Type:

Full-Time, Direct Hire

Company Overview

Growing cybersecurity technology company providing endpoint protection solutions for business and enterprise environments.

Position Overview

Seeking a Cyber Security Compliance Analyst with 5+ years of experience in cybersecurity compliance, IT audit, risk, governance, or a highly regulated environment. You’ll support audits, control testing, risk assessments, remediation, and compliance across multiple security frameworks.

What You'll Do

• Support SOC 2, ISO 27001, NIST 800-171, FedRAMP, and other compliance initiatives.
• Coordinate audit evidence, documentation, control validation, and auditor requests.
• Test controls, identify compliance gaps, and track remediation.
• Conduct risk assessments and maintain audit-ready policies and documentation.
• Partner with IT, Security, and Engineering on technical security controls.
• Support vendor risk reviews and customer compliance requests.

What You Bring

• 5+ years in cybersecurity compliance, IT audit, risk, information security, or regulatory compliance.
• Experience with SOC 2 and/or ISO 27001.
• Exposure to NIST 800-171, FedRAMP, HIPAA, PCI DSS, DoD, GDPR, or similar frameworks.
• Experience supporting audits, identifying control gaps, and driving remediation.
• Experience with vendor risk, control mapping, SSPs, POA&Ms, or continuous monitoring.
• Strong communication skills with both technical and non-technical teams.
• Bachelor’s degree or equivalent professional experience.
• Stable work history with meaningful tenure in previous roles.

Preferred

• Familiarity with AWS, Azure, or GCP.
• CISA, CISM, CISSP, Security+, ISO 27001, or similar certification.