GRC Analyst

Akkodis; Chicago (IL); Hybrid; USD 110,000 - 130,000; Full time

Benefits offered by this job

PTO 20 days

Retirement & Profit Sharing

Medical & Dental Plans

Job summary

Akkodis, Inc. is seeking a GRC Analyst for a full-time direct-hire hybrid role in Chicago, IL.

The GRC Analyst will support the implementation, execution, and continuous improvement of the organization's GRC program, aligning risk management, policy governance, and compliance with regulatory requirements and industry best practices. Qualifications include six years of GRC experience with SIG, a bachelor’s degree, and strong analytical skills.

Qualifications

• Six years of GRC experience.
• Experience using SIG is a MUST.
• Foundational cybersecurity and risk management knowledge.
• Strong written and spoken communication and stakeholder management.

Responsibilities

• Develops, maintains, and updates security and compliance policies, standards, and procedures.
• Supports governance processes including policy reviews and approvals.
• Tracks and reports on internal control framework compliance and risk treatments.
• Leads third-party risk management activities and vendor assessments.
• Produces risk, compliance, and control reports and monitors KPIs/KRIs.

Skills

GRC

Analytical skills

Stakeholder management

Documentation

Education

Bachelor's degree in Information Security / IT / related field

Tools

SIG

Archer

OneTrust

LogicGate

ZenGRC

Job description

Akkodis, Inc. is seeking a GRC Analyst for a full-time direct hire and hybrid role with an industry leader located in Chicago IL. The GRC Analyst will be responsible for supporting the implementation, execution, and continuous improvement of the organization's GRC program. This role ensures that risk management, policy governance, and compliance activities align with organizational objectives, regulatory requirements, and industry best practices. Qualifications include 6 years of GRC experience and experience with SIG.

Salary Range: $110-130K; salary negotiable based on experience, education, geographic location, and other factors

This is a great opportunity to work with a fast-growing and stable company offering a positive work environment and consistently earns a spot on Chicago and Cleveland's Top Workplaces list! The role offers 20 days of PTO to start and 37.5 hour workweek!

GRC Analyst Job Responsibilities Include :

Governance

• Develops, maintains, and updates security and compliance policies, standards, and procedures.
• Supports internal governance processes, including document lifecycle management, policy reviews, and approvals.
• Tracks and reports on compliance with internal control frameworks and policies.
• Leads third-party risk management activities, including vendor assessments, evidence review, and continuous monitoring.
• Conducts and documents risk assessments across business units, systems, and processes.
• Maintains the enterprise risk register and ensures risks are properly categorized, scored, and remediated.
• Partners with stakeholders to identify risk treatment options and tracks remediation activities.

Compliance

• Assists with compliance efforts related to client obligations, outside counsel guidelines, and frameworks such as ISO 27001, CIS, SOC 2, NIST CSF/800-53, GDPR, HIPAA, PCI, or others relevant to the organization.
• Collects, validates, and maintains evidence for internal/external audits.
• Supports regulatory and certification audits by coordinating with internal teams and external auditors.
• Monitors and reports on compliance gaps, exceptions, and corrective actions.

Security Awareness & Training

• Helps develop and administer security awareness programs.
• Supports phishing simulation campaigns and related analytics to track organizational improvement.

Monitoring & Reporting

• Produces regular and ad-hoc reports on risk, compliance posture, and control effectiveness.
• Utilizes GRC tools (e.g., SIG, Archer, OneTrust, LogicGate, ZenGRC) to manage workflows and dashboards.
• Tracks KPIs/KRIs to measure program maturity and effectiveness.

Qualifications:

• Bachelor's degree in Information Security, Cybersecurity, Information Technology, Business, or a related field, OR equivalent professional experience.
• Minimum of six years' experience in GRC, which must use of GRC tools such as SIG, Archer, OneTrust, LogicGate, ZenGRC. SIG experience at minimum is a MUST HAVE.
• Foundational understanding of cybersecurity principles and risk management, and knowledge of compliance frameworks such as ISO 27001, CIS, and NIST,
• Strong analytical and documentation skills, excellent communication, and stakeholder management abilities.

Preferred qualifications include (plusses; not required):

• CISA, CRISC, CGRC, Security+, ISO 27001 Internal Auditor, or CISM certification, whether in progress or completed.
• Experience supporting audits or risk assessments in a regulated environment.

Equal Opportunity Employer/Veterans/Disabled

Benefits offerings include but are not limited to:

• PTO of up to 20 days per year to start
• Retirement Savings Plan and Profit Sharing Plan
• Medical and Dental Plans

To read our Candidate Privacy Information Statement, which explains how we will use your information, please visit https://www.akkodis.com/en/privacy-policy.

The Company will consider qualified applicants with arrest and conviction records in accordance with federal, state, and local laws and/or security clearance requirements, including, as applicable:

The California Fair Chance Act

Los Angeles City Fair Chance Ordinance

Los Angeles County Fair Chance Ordinance for Employers