GRC Analyst

Glocomms; Dallas (TX); Hybrid; USD 90,000 - 150,000; Full time

Benefits offered by this job

Competitive base salary

Annual bonus

Comprehensive medical, dental, and eye

401(k) with company match

Generous PTO and holidays

Job summary

Glocomms, in partnership with a leading IT and Cloud Computing firm, is seeking an Information Security Governance, Risk & Compliance (GRC) Analyst to support security governance, risk management, and regulatory compliance.

You will conduct risk assessments, manage third-party risk, develop policies, and produce executive risk reports while collaborating with engineering, legal, HR, and operations. Hybrid or remote options available.

Qualifications

• 5+ years of experience in Information Security, GRC, Risk Management, Compliance, or Audit.
• Experience conducting security risk assessments and managing risk remediation activities.
• Knowledge of third-party risk management and vendor security reviews.
• Experience developing security policies, standards, and governance documentation.
• Familiarity with ISO 27001, SOC 2, NIST CSF, NIST 800-53, and CIS Controls.
• Experience with GRC platforms such as ServiceNow GRC, Archer, Vanta, Drata, or Hyperproof.
• Strong communication, documentation, and stakeholder management skills.
• Certifications such as CISM, CRISC, CISA, CISSP, or ISO 27001 certifications are preferred.

Responsibilities

• Manage security governance, risk management, and compliance activities across the organization.
• Conduct risk assessments and maintain the enterprise risk register.
• Lead third-party and vendor risk assessment processes.
• Develop and maintain information security policies, standards, and procedures.
• Participate in security reviews, change management reviews, and risk discussions.
• Track security exceptions and support remediation efforts.
• Monitor compliance with security frameworks and regulatory requirements.
• Create risk reports, dashboards, and executive-level updates.
• Partner with engineering, legal, HR, operations, and business teams on security initiatives.
• Drive continuous improvement of governance and risk management processes.

Skills

Information Security

GRC

Risk Management

Compliance

Audit

Communication

Documentation

Stakeholder Management

Security Policy Development

Tools

ServiceNow GRC

Archer

Vanta

Drata

Hyperproof

Job description

Glocomms is partnered with a leading IT and Cloud Computing firm seeking an Information Security Governance, Risk & Compliance (GRC) Analyst to support and enhance the organization’s security governance, risk management, and compliance programs. This individual will play a key role in identifying and managing information security risks, maintaining governance frameworks, overseeing third-party risk processes, and ensuring alignment with industry standards and regulatory requirements. The ideal candidate is a collaborative security professional who can effectively balance business objectives with risk management and compliance needs.

Responsibilities

• Manage security governance, risk management, and compliance activities across the organization.
• Conduct risk assessments and maintain the enterprise risk register.
• Lead third-party and vendor risk assessment processes.
• Develop and maintain information security policies, standards, and procedures.
• Participate in security reviews, change management reviews, and risk discussions.
• Track security exceptions and support remediation efforts.
• Monitor compliance with security frameworks and regulatory requirements.
• Create risk reports, dashboards, and executive-level updates.
• Partner with engineering, legal, HR, operations, and business teams on security initiatives.
• Drive continuous improvement of governance and risk management processes.

Qualifications

• 5+ years of experience in Information Security, GRC, Risk Management, Compliance, or Audit.
• Experience conducting security risk assessments and managing risk remediation activities.
• Knowledge of third-party risk management and vendor security reviews.
• Experience developing security policies, standards, and governance documentation.
• Familiarity with frameworks such as ISO 27001, SOC 2, NIST CSF, NIST 800-53, and CIS Controls.
• Experience with GRC platforms such as ServiceNow GRC, Archer, Vanta, Drata, or Hyperproof.
• Strong communication, documentation, and stakeholder management skills.
• Certifications such as CISM, CRISC, CISA, CISSP, or ISO 27001 certifications are preferred.

Benefits

• Competitive base salary and annual bonus.
• Comprehensive medical, dental, and vision coverage.
• 401(k) with company match.
• Generous paid time off and company holidays.
• Flexible work environment, including hybrid or remote options where applicable.