GRC Analyst

Apex B2Bi Solutions; Illinois; On-site; USD 90,000 - 130,000; Full time

Job summary

Apex B2Bi Solutions is seeking a GRC Analyst to support audit readiness, regulatory compliance, and risk management across multiple frameworks. You will help implement governance standards and oversee third-party risk as part of a cross-functional team.

The role emphasizes privacy considerations, contract risk with Legal and Procurement, and the administration of GRC tools like Hyperproof to track controls and improvements.

Qualifications

• Experience with GRC frameworks and audit processes.
• Strong understanding of risk management and compliance.
• Familiarity with third-party risk and contract security requirements.
• Excellent documentation and stakeholder communication skills.

Responsibilities

• Support audit readiness and risk management across multiple frameworks.
• Implement and maintain governance policies, standards, and procedures.
• Oversee third-party risk management, vendor inventory, and remediation tracking.
• Collaborate with Legal and Procurement on contract risk and compliance obligations.
• Administer and optimize GRC platforms (e.g., Hyperproof) and KPI reporting.
• Conduct risk assessments and maintain risk registers with accountability.
• Lead privacy alignment and controls in line with industry standards.
• Provide training and awareness programs to improve security posture.

Skills

GRC frameworks

Audit processes

Risk management

Compliance knowledge

Third-party risk

Contract security requirements

Documentation & stakeholder comms

Tools

Hyperproof

Job description

The GRC Analyst supports audit readiness, regulatory compliance, and risk management initiatives across multiple frameworks. This role ensures effective governance, policy implementation, and third-party risk oversight while aligning security and privacy practices with industry standards.

Key Responsibilities:

• Support compliance across frameworks such as ISO 27001, SOC 2, NIST Cybersecurity Framework, NIST SP 800-171, and CMMC
• Guide privacy practices aligned with GDPR
• Lead Third-Party Risk Management (TPRM): vendor inventory, risk reviews, tiering, and tracking remediation
• Collaborate with Legal and Procurement on contract risk, clauses, and compliance obligations
• Own and enhance security awareness & training programs (including phishing simulations and KPI tracking)
• Administer and optimize GRC platforms such as Hyperproof
• Conduct risk assessments and maintain risk registers with accountability tracking
• Develop and implement policies, standards, and governance procedures
• Support audit readiness, gap analysis, and control testing across frameworks

Key Responsibilities:

• Experience with GRC frameworks and audit processes.
• Strong understanding of risk management and compliance.
• Familiarity with third-party risk and contract security requirements.
• Excellent documentation and stakeholder communication skills.