GRC Analyst

New York Technology Partners; Chicago (IL); On-site; USD 65,000 - 90,000; Full time

Job summary

New York Technology Partners in Chicago seeks a detail-oriented GRC Analyst to manage regulatory compliance and risk programs, driving audit readiness and scalable processes.

The role partners with Legal, IT, HR, Finance, and Security to translate complex requirements into practical controls, monitor GDPR, HIPAA, SOC 2, ISO 27001, and support audits and certifications.

Qualifications

• 1+ year of experience in compliance, regulatory affairs, GRC, or internal controls.
• Experience supporting compliance audits or certifications.
• Ability to interpret regulatory requirements and apply them to business processes.
• Experience with GRC platforms such as Drata, Vanta, ServiceNow GRC, OneTrust, or similar tools.
• Strong attention to detail and organizational skills.
• Excellent written and verbal communication skills.
• Ability to manage multiple priorities in a fast-paced environment.
• Proactive, analytical, and solution-oriented approach.

Responsibilities

• Implement and maintain compliance programs, controls, and processes.
• Monitor regulatory frameworks and regulations (e.g., GDPR, HIPAA, SOC 2, ISO 27001).
• Support internal and external audits and certifications.
• Track findings, risks, and remediation activities.
• Develop and maintain compliance policies and documentation.
• Conduct risk assessments and identify control gaps.
• Maintain risk and compliance registers.
• Assist investigations of compliance violations or data privacy incidents.
• Coordinate compliance training and awareness.
• Partner with Legal, IT, HR, Finance, and Security to stay compliant.

Skills

Regulatory knowledge

Audit readiness

Cross-functional collaboration

Attention to detail

Communication skills

Tools

Drata

Vanta

ServiceNow GRC

OneTrust

Job description

We are seeking a detail-oriented GRC Analyst to support and manage regulatory compliance, governance, and risk programs. This role will help ensure the organization remains aligned with applicable regulations, industry standards, and internal policies while maintaining audit readiness and scalable compliance processes.

The GRC Analyst will manage compliance programs and controls, support audits and certifications, oversee remediation efforts, and partner cross-functionally with Legal, IT, HR, Finance, and Security. The ideal candidate has strong knowledge of compliance frameworks and the ability to translate regulatory requirements into practical business processes.

Key Responsibilities

• Implement and maintain compliance programs, controls, and processes.
• Monitor compliance with frameworks and regulations including GDPR, HIPAA, SOC 2, and ISO 27001.
• Support and coordinate internal and external audits and certification processes.
• Track compliance findings, risks, and remediation activities.
• Develop and maintain policies, procedures, and compliance documentation.
• Conduct compliance risk assessments and identify control gaps and emerging risks.
• Maintain risk and compliance registers and escrow significant issues.
• Support investigations involving compliance violations or data privacy incidents.
• Coordinate compliance training and promote organization-wide awareness.
• Partner with cross-functional teams to ensure ongoing compliance.

Qualifications

• 1+ year of experience in compliance, regulatory affairs, GRC, or internal controls.
• Working knowledge of GDPR, HIPAA, SOC 2, and ISO 27001.
• Experience supporting or participating in compliance audits or certifications.
• Ability to interpret regulatory requirements and apply them to business processes.
• Experience with GRC platforms such as Drata, Vanta, ServiceNow GRC, OneTrust, or similar tools.
• Strong attention to detail and organizational skills.
• Excellent written and verbal communication skills.
• Ability to manage multiple priorities in a fast-paced environment.
• Proactive, analytical, and solution-oriented approach.