Entry Level GRC Analyst

Hotman Group, LLC; United States; On-site; USD 50,000 - 70,000; Full time

Benefits offered by this job

Opportunity for permanent role after 6 months

Supportive team culture

Collaborative work environment

Job summary

A dynamic cybersecurity firm is looking for a detail-oriented Entry-Level GRC Analyst to join their remote team. In this role, you'll work closely with senior members to strengthen client cybersecurity and compliance programs. You'll be involved in assessing controls, developing policies, and monitoring remediation efforts, all in a collaborative environment that values curiosity and growth. Ideal candidates have a relevant degree and a passion for cybersecurity. Join us to make a meaningful impact while advancing your career.

Qualifications

• 0-2 years of relevant experience in cybersecurity, audit, risk, compliance.
• Familiarity with security frameworks like ISO, NIST, SOC 2.
• Reliable internet and secure remote workspace.

Responsibilities

• Assess and improve client security and IT controls.
• Develop policies and risk assessments aligned to top frameworks.
• Build risk registers and monitor remediation progress.

Skills

Problem-solving

Attention to detail

Communication

Critical thinking

Organization

Education

Bachelor's or Graduate degree in Cybersecurity or related field

Job description

Are you a creative problem-solver who loves a good challenge? Passionate about cybersecurity, risk, and compliance? Ready to grow your career in an environment that's dynamic, supportive, and full of opportunity?

Hotman Group (HG) is looking for driven, detail-obsessed team members to join our rapidly growing boutique firm as a full-time, remote Entry-Level GRC Analyst. This is a contract-to-hire position with top performers moving to permanent roles within 6 months — and trust us, we want you to be one of them.

What You'll Do

As a GRC Analyst at Hotman Group, you'll be helping our clients strengthen their cybersecurity and compliance programs. You'll work side-by-side with senior team members and partners to:

• Assess and improve client security and IT controls
• Develop policies, processes, and risk assessments aligned to top frameworks like NIST, ISO 27001, and SOC 2
• Crosswalk and harmonize controls across multiple compliance frameworks
• Analyze, recommend, and implement security best practices
• Build risk registers, lead assessments, and monitor remediation progress
• Work hands-on with GRC tools and contribute to innovative solutions for complex challenges
• Translate technical and regulatory requirements into clear, actionable steps for our clients

You'll touch every aspect of cybersecurity and GRC — no boring, repetitive work here. Every day will bring new opportunities to learn, grow, and make a real impact.

What You Bring

• Bachelor's or Graduate degree in Cybersecurity, Information Systems, or a related field
• 0-2 years of relevant experience (cybersecurity, audit, risk, compliance, GRC)
• Solid understanding of fundamental security and IT concepts (access controls, data retention, change management, etc.)
• Familiarity with major security and privacy frameworks (ISO, NIST, SOC 2, HIPAA, etc.)
• Strong critical thinking, organization, and communication skills
• Ability to balance multiple projects and deadlines with exceptional follow-through
• Technical aptitude — you're curious, you learn fast, and you don't shy away from new tools
• A passion for cybersecurity and a commitment to helping companies build safer, stronger environments

Bonus points if you're already pursuing a security or risk certification!

What We're Looking For

We're not just hiring a skill set — we're looking for the right person. Someone who:

• Thrives in a fast-paced, high-trust, low-ego environment
• Can think critically but also execute with precision
• Shows up with curiosity, energy, and a solutions-first attitude
• Values collaboration, continuous learning, and making a real difference
• Isn't afraid to roll up their sleeves and dive into the work

Requirements

• Located in the USA with permanent work authorization
• Ability to pass a background check
• Reliable internet and a secure remote workspace

About Hotman Group, LLC

At Hotman Group, we're redefining what it means to be a trusted partner in cybersecurity and GRC (Governance, Risk, and Compliance). We're a rapidly growing boutique firm dedicated to helping business leaders earn and keep the trust of their customers — all through expert guidance, flawless execution, and a deep commitment to quality.

Our clients range from Fortune 1000 companies to fast-growing startups — and they all have one thing in common: they rely on us to deliver results that matter. Thanks to our comprehensive services, high retention rates, and client satisfaction, we've built a reputation as a team that gets it done, and gets it done right.

We offer:

• Cybersecurity strategy and program development
• Fully managed programs, from implementation to maturation and remediation
• One-time projects like policies, audits, risk assessments, incident response planning, and more
• Support across top compliance frameworks like SOC 2, NIST CSF, ISO 27001, HITRUST, and others

Whatever the challenge, we're ready to solve it — with precision, expertise, and heart.

Our Culture

At Hotman Group, we believe work should be more than just a job — it should be a place where you can grow, thrive, and have a great time doing it.

We've intentionally left behind the rigid corporate culture to build something better: a collaborative, energizing environment where every voice matters and every team member is empowered to bring their full self to work. Here, you'll tackle complex, meaningful problems, create real impact for our clients, and have a lot of fun along the way.

If you're passionate about excellence, excited by challenges, and ready to be part of a team that values both hard work and genuine connection, you'll fit right in.

Join us — and let's build something amazing together.