GRC Analyst

ADP, Inc.; United States; À distance; USD 120 000 - 130 000; Plein temps

Résumé du poste

Parallels is seeking a GRC Analyst to advance our Governance, Risk, and Compliance program in a fully remote US role. You’ll drive third-party risk management, respond to RFPs and security questionnaires, and support audits against SOC 2, ISO 27001, and DORA.

Collaborative work across IT, Legal, Product, Security, and HR is key to success. With 4+ years in GRC or related fields, you’ll maintain risk documentation, track controls, and help keep policies current with regulatory changes.

Qualifications

• Bachelor's degree in Information Security, Computer Science, Business, or related field (or equivalent experience).
• 4+ years of experience in GRC, IT audit, information security, or a related compliance role.
• Working knowledge of SOC 2, ISO 27001, and DORA requirements.
• Experience with risk register tools, Trust Centers, GRC platforms and ticketing systems.
• Excellent written communication skills for policy drafting and compliance reporting.

Responsabilités

• Monitor organizational compliance with internal policies and external regulations. Track control performance, identify gaps, and prepare regular compliance status reports for leadership.
• Respond to customer RFPs and security/vendor questionnaires, coordinating with subject matter experts to ensure accurate and timely responses. Maintain a library of standard responses and supporting evidence.
• Support the third-party risk management program, including vendor security assessments, due diligence reviews, and ongoing monitoring of vendor risk. Track vendor remediation items and maintain vendor risk documentation.
• Maintain and update the organization's risk register, ensuring all identified risks are documented, assessed, and monitored. Track risk treatment plans and follow up with risk owners on remediation status.
• Assist in the development, review, and implementation of GRC policies and procedures. Help ensure policies stay current with regulatory changes and organizational needs, and support employee awareness of policy requirements.
• Leads audits and assessments against SOC 2, ISO 27001, and DORA requirements. Assist in evidence collection, control testing, and remediation tracking for audit findings.

Connaissances

GRC

Risk management

Policy drafting

Technical writing

Independent work

Formation

Bachelor's degree in Information Security, Computer Science, Business, or related field

Outils

GRC platforms

risk register tools

Trust Centers

ticketing systems

Description du poste

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

GRC Analyst

Regular Full-Time Remote, US

9 days ago Requisition ID: 1074

Salary Range: $120,000.00 To $130,000.00 Annually

GRC Analyst

Parallels has an immediate vacancy for this role.

Push the boundaries of tech. In your sweatpants.

Parallels is seeking a GRC Analyst to support the ongoing maturity of our Governance, Risk, and Compliance program. The ideal candidate is experienced in third-party risk management, has worked on RFPs, security questionnaires, is familiar with compliance frameworks such as SOC 2, ISO 27001, and DORA, and is comfortable working cross-functionally with IT, Legal, Product, Security, and HR.

The top creative and technical minds could work anywhere. So why are so many of them choosing Parallels? Here are three reasons:

• This is the moment. It's an exciting time at Parallels, with strong leadership, a refreshed brand, and a whole new approach to changing the way the world works. We're at the forefront of a movement, and we want you to ride this wave with us.
• We want you to be you. Too often, companies tell you about their culture and then expect you to fit it. Our culture is built from the people who work here. We want you to feel safe to be who you are, take risks, and show us what you've got.
• It's your world. We know you have a life. We want to be part of it, but not all of it. At Parallels, we're serious about empowering people to work when, how, and where they want. Couch? Sweatpants? Cool with us. We believe that happy employees mean happy customers. That's why we hire amazing people and get out of their way.

Sound good so far? Awesome. Let's talk more about the GRC Analyst role and see if we're destined to be together.

As a GRC Analyst, you will:

• Monitor organizational compliance with internal policies and external regulations. Track control performance, identify gaps, and prepare regular compliance status reports for leadership.
• Respond to customer RFPs and security/vendor questionnaires, coordinating with subject matter experts to ensure accurate and timely responses. Maintain a library of standard responses and supporting evidence.
• Support the third-party risk management program, including vendor security assessments, due diligence reviews, and ongoing monitoring of vendor risk. Track vendor remediation items and maintain vendor risk documentation.
• Maintain and update the organization's risk register, ensuring all identified risks are documented, assessed, and monitored. Track risk treatment plans and follow up with risk owners on remediation status.
• Assist in the development, review, and implementation of GRC policies and procedures. Help ensure policies stay current with regulatory changes and organizational needs, and support employee awareness of policy requirements.
• Leads audits and assessments against SOC 2, ISO 27001, and DORA requirements. Assist in evidence collection, control testing, and remediation tracking for audit findings.

What YOU bring to the team:

• Bachelor's degree in Information Security, Computer Science, Business, or related field (or equivalent experience)
• 4+ years of experience in GRC, IT audit, information security, or a related compliance role
• Working knowledge of SOC 2, ISO 27001, and DORA (Digital Operational Resilience Act) requirements
• Experience with risk register tools, Trust Centers, GRC platforms and ticketing systems
• Excellent written communication skills for policy drafting and compliance reporting
• Ability to work independently and manage multiple concurrent reviews and deadlines

US:

• Parallels features award-winning solutions that have helped millions of users for 40 years (can you believe it?!).
• We have millions of users and decades of innovation under our belts.
• We offer a fully remote workspace. There is no pressure to work in an office whatsoever.
• Hours are flexible, too! You've worked hard to build your life, and we don't want you to give it up for work.
• Our team is growing fast, and there's a ton of energy and a lot of really smart, motivated, fun people ready to welcome you in.

(FYI, we're lucky to have a lot of interest and we so appreciate your application, though please note that we'll only contact you if you've been selected for an interview.)

About Parallels

Parallels is a top VDI/EUC product helping businesses since 1999. Whether it's desktop or cloud, on-prem or hybrid, Parallels has a solution to help your company optimize the speed and security of your work environment at an affordable price.

Our products enable millions of connected knowledge workers around the world to do great work faster. Our success is driven by an unwavering commitment to deliver a broad portfolio of innovative applications - including Parallels RAS, Parallels Desktop Enterprise, and Parallels DaaS, among others.

It is our policy and practice to offer equal employment opportunities to all qualified applicants and employees without regard to race, color, age, religion, national origin, sex, political affiliation, sexual orientation, marital status, disability, veteran status, genetics, or any other protected characteristic.

Parallels is committed to an inclusive, barrier-free recruitment and selection process and work environment. If you are contacted for a job opportunity, please advise us of any accommodation that are required. Appropriate accommodation will be provided upon request as required by Federal and Provincial regulations and Company Policy. Any information received relating to accommodation will be treated as confidential.

As part of our evaluation process, we utilize an AI tool to assess candidates.