GRC Analyst

Gravity IT Resources; South Jordan (UT); On-site; USD 83,000 - 124,000; Full time

Job summary

Gravity IT Resources, onsite in Salt Lake County, Utah, is seeking a GRC Analyst to strengthen governance, risk, and compliance practices. You will translate audit findings into actionable remediation plans and rewrite policies to align with standards, creating clear documentation for stakeholders.

The role requires strong writing and communication skills, collaboration across IT, security, and business teams, and the ability to drive remediation initiatives organization-wide.

Qualifications

• Experience in Governance, Risk & Compliance (GRC), information security, IT risk management, audit remediation.
• Proven ability to translate audit findings into remediation plans.
• Strong skills in writing, revising, and maintaining security policies and procedures.
• Excellent written and verbal communication for technical and nontechnical audiences.

Responsibilities

• Review audit findings, security assessments, and compliance documentation to identify gaps.
• Develop actionable remediation plans to address gaps and improve security.
• Rewrite and update security policies to align with standards.
• Create new policies, procedures, standards, and supporting documentation.
• Translate requirements into clear, structured plans and reports.
• Collaborate with IT, security, compliance, and business teams to validate requirements.
• Track remediation activities and evidence collection.
• Suggest improvements to governance processes and controls.

Skills

GRC

Audit remediation

Policy development

Technical writing

Job description

Job Title: GRC Analyst

Location Requirements: Onsite / Salt Lake County

Job Type: Contract

Role Overview:
You will support and strengthen the organization’s information security governance, risk management, and compliance practices. This hands‑on role involves reviewing audit findings, identifying gaps, and developing clear, actionable documentation to address risks. You’ll transform technical security requirements into practical guidance understandable for both technical and nontechnical teams. Your work will focus on creating sustainable policies, procedures, and remediation practices that can be adopted organization-wide.

Responsibilities:

• Review and analyze audit findings, security assessments, and compliance documentation to identify gaps and risks.
• Evaluate existing information security policies, procedures, standards, and controls to find deficiencies and missing documentation.
• Develop actionable recommendations and remediation plans to address audit findings and improve security and compliance practices.
• Rewrite and update security policies and procedures to align with organizational needs, industry best practices, and standards.
• Create new policies, procedures, standards, and supporting documentation where gaps exist.
• Translate audit findings and security requirements into clear, structured requirements, plans, and reports.
• Develop documentation that communicates security expectations and steps to technical teams, business stakeholders, and end users.
• Collaborate with IT, security, compliance, and business teams to validate requirements and ensure practicality.
• Help establish consistent documentation practices and repeatable processes.
• Track remediation activities, document progress, and support evidence collection.
• Recommend improvements to governance processes, policy management, risk documentation, and internal controls.

Required Qualifications:

• Experience in Governance, Risk & Compliance (GRC), information security, IT risk management, audit remediation, or related discipline.
• Demonstrated experience reviewing audit findings and translating gaps into remediation plans.
• Strong experience writing, revising, and maintaining security policies, procedures, standards, and requirements documentation.
• Ability to analyze existing documentation, identify deficiencies, and develop practical recommendations.
• Excellent technical writing, documentation, and communication skills.
• Ability to explain complex security and compliance concepts clearly to technical and nontechnical audiences.
• Strong analytical, organizational, and problem‑solving skills.
• Ability to work independently, manage multiple priorities, and collaborate effectively across teams.

Equal Employment Opportunity Statement
Gravity IT Resources is an Equal Opportunity Employer. We are committed to creating an inclusive environment for all employees and applicants. We do not discriminate on the basis of race, color, religion, sex (including pregnancy, sexual orientation, or gender identity), national origin, age, disability, genetic information, veteran status, or any other legally protected characteristic. All employment decisions are based on qualifications, merit, and business needs.