GRC Analyst

Rhymetec; United States; Remote; USD 73,000 - 99,000; Full time

Benefits offered by this job

Health insurance

Dental and Vision benefits

Generous annual leave & holidays

Workplace pension

Wellbeing support

Job summary

Rhymetec is seeking a GRC Analyst for a remote-based role supporting UK clients from London area. The position focuses on implementing security metrics and compliance controls, coordinating with the Security Program Manager, and driving cloud security enhancements across AWS, GCP, and Azure.

Strong communication and autonomy are required. The role involves leading audits, mapping frameworks such as SOC 2 Type 2, ISO 27001, GDPR, and DORA into actionable items, and delivering security programs

Qualifications

• Knowledge of PCI, ISO/IEC, SOC 2, DORA, GDPR frameworks.
• Strong security skills with cloud environments (AWS, GCP, Azure).
• Experience in customer service and building professional client relationships.

Responsibilities

• Prepare agendas and materials for client meetings.
• Configure monitoring alarms in AWS, Azure, GCP and Datadog.
• Lead audits with auditors and gather evidence of compliance.
• Develop security documentation and policies for clients.
• Educate clients on security best practices.

Skills

Cloud security

Regulatory compliance

Client relations

DevOps integration

Education

Bachelor’s degree or equivalent

Job description

Job Title: GRC Analyst
Location: Remote (London area)
Employment Type: Full-time, Permanent Role

About Rhymetec:
Rhymetec was founded in New York City in 2015, growing steadily in the areas of compliance, cybersecurity and data privacy. Our mission is to ensure our clients are compliant faster, so they can focus on their core business and less on the complexities of building effective and compliant infosec programs.

Job Description:
We are seeking a GRC Analyst to join our growing team in the UK! The CSA will be responsible for supporting the development and implementation of solutions that help Rhymetec’s clients achieve, manage and measure security metrics and compliance requirements. The role will work closely with their Security Program Manager to help design and deliver security and compliance objectives and have the ability to help drive foundational changes in internal cloud platforms to enhance their security posture. The ideal candidate will have a team first mentality and fit within the core values and culture at Rhymetec. This person will be responsive to both customers and team members with communications, be detail oriented, and hold a high level of autonomy to complete work on time and with quality.

Responsibilities:

• Prepare agendas and supporting materials for client business.
• Conduct meetings with clients regularly.
• Configure performance monitoring alarms in AWS, Azure, GCP, Datadog and other cloud infrastructures.
• Configure Security alarms and Intrusion Detection Systems in AWS, GCP, Azure.
• Set up supporting security applications.
• Set up mobile device management applications such as Jamf, Jumpcloud, Microsoft Endpoint manager, Hexnode, etc.
• Configure and maintain compliance monitoring platforms.
• Conduct internal audits, risk assessments, and generate reports.
• Conduct Incident Response Tabletop exercises with clients.
• Conduct Business Continuity and Disaster recovery tabletop exercises with clients.
• Support clients in mapping frameworks/controls such as SOC 2 Type 2, ISO 27001, GDPR, and DORA into actionable items for clients.
• Conduct employee access reviews, SaaS vendor security assessments, and Gap assessments.
• Triage bug/vulnerability reports from security researchers.
• Complete security questionnaires on behalf of clients.
• Draft supporting documents for clients’ information security management systems and information security policies.
• Gather & maintain evidence of compliance for various frameworks.
• Lead engagements with auditors on behalf of clients.
• Communicate tasks to clients’ employees and educate clients on security best practices.

Qualifications:

• Knowledge of compliance and regulatory frameworks (PCI, ISO/IEC, SOC 2, DORA, GDPR)
• Strong logical security skills, with experience in cloud security
• Understanding of cloud environments (AWS, GCP, Azure) and integrating security controls through DevOps and Infrastructure as a Service (IaaS) techniques
• Experience in customer service and ability to develop professional relationships with customers

Must Haves:

• Bachelor’s degree or equivalent experience related to the technology or cyber security field
• Bilingual in German and/ or French
• 4+ years of work experience in technology or cybersecurity.
• Ability to flex and adapt to innovative and changing work demands.
• Travel up to 2 weeks out of the calendar year.

Rhymetec Benefits

• Comprehensive, company-funded private medical insurance for employees
• Dental and Vision benefits
• Generous annual leave package, plus sick time and 8 Paid Holidays
• Workplace pension
• Wellbeing Support: An annual subscription to TalkSpace, our online counselling and therapy service

Rhymetec is committed to creating a diverse environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment regardless of race, colour, religion, gender, gender identity or expression, sexual orientation, national origin, genetic background, disability, age, or veteran status.