GRC analyst

Frontier Cybersecurity Consulting; Miami (FL); Hybrid; USD 70,000 - 100,000; Full time

Job summary

Frontier Cybersecurity Consulting in Miami, FL seeks a GRC Analyst for risk assessments, control testing, and gap analyses across HIPAA, SOC 2, ISO 27001 and more. This full-time hybrid role involves onsite client work and remote collaboration.

You will gather evidence, document policies, map controls to regulatory requirements, and prepare audit-ready artifacts. You will work with consultants and client stakeholders to design remediation plans and monitor ongoing compliance.

Qualifications

• Experience with governance, risk, and compliance practices including risk assessments and audit readiness.
• Familiarity with HIPAA, SOC 2, ISO 27001, NIST, PCI DSS and related frameworks.
• Strong writing and policy/documentation capabilities; ability to produce audit-ready reports.
• Proficiency with spreadsheets and document management tools; excellent communication.
• Ability to manage multiple projects in a hybrid work environment.

Responsibilities

• Perform risk assessments, control testing, and gap analyses for clients.
• Gather and analyze evidence; document policies and procedures.
• Map controls to regulatory and industry requirements; prepare audit-ready artifacts.
• Design remediation plans with consultants and client stakeholders; track progress.
• Support ongoing compliance monitoring and stay current on regulations.

Skills

GRC fundamentals

HIPAA, SOC 2, ISO 27001

Analytical skills

Documentation skills

Spreadsheets & docs tools

Excellent communication

Project management

Hybrid work ability

Education

Bachelor's degree

CISA/CRISC/CISSP/HCISPP

Job description

Company Description

Frontier Cybersecurity Consulting helps organizations establish strong security and compliance programs that meet the expectations of regulators, auditors, and enterprise partners. The firm specializes in audit readiness, leading clients through risk assessments and remediation to prepare them for frameworks such as HIPAA, SOC 2, and other industry-specific standards. Frontier uses a practical, project-based approach to assess risk, build tailored controls and documentation, and leave clients audit-ready with defensible evidence. For organizations seeking ongoing support, Frontier provides retained compliance monitoring to keep programs aligned with evolving regulations and threats. Based in South Florida, Frontier offers enterprise-grade cybersecurity and compliance rigor without enterprise-level overhead.

Role Description

The GRC Analyst will support client engagements by performing risk assessments, control testing, and gap analyses across various compliance frameworks, including HIPAA and SOC 2. In this full-time hybrid role based in Miami, FL, the analyst will spend part of the time onsite with clients or the Frontier team and part working from home. Day-to-day responsibilities include gathering and analyzing evidence, documenting policies and procedures, mapping controls to regulatory and industry requirements, and preparing audit-ready artifacts. The GRC Analyst will collaborate with consultants and client stakeholders to design practical remediation plans, track progress, and support ongoing compliance monitoring. The role also involves staying current on relevant regulations, standards, and emerging risks to help refine Frontier's methodologies and client guidance.

Qualifications

• Experience with governance, risk, and compliance practices, including risk assessments, control design, and audit readiness activities.
• Working knowledge of common frameworks and regulations (e.g., HIPAA, SOC 2, ISO 27001, NIST, PCI DSS) and how they apply in business environments.
• Strong analytical and documentation skills, including the ability to evaluate evidence, write clear policies and procedures, and create audit-ready reports.
• Proficiency with spreadsheets, document management tools, and collaboration platforms used to manage compliance programs and project tasks.
• Effective communication skills for working with both technical and non-technical stakeholders, including the ability to explain complex requirements in plain language.
• Ability to manage multiple projects, prioritize tasks, and work independently in a hybrid environment with limited supervision.
• Bachelor's degree in information security, information systems, business, or a related field; relevant certifications (e.g., CISA, CRISC, CISSP, HCISPP) are a plus.
• Prior experience in consulting, internal audit, or cybersecurity/compliance roles is preferred, especially in small to mid-sized business environments.