GRC Analyst: Cyber Risk, Compliance & Reporting

Insight Global; Carol Stream (IL); On-site; USD 95,000 - 135,000; Full time

Job summary

Insight Global seeks a cybersecurity GRC professional to own the day‑to‑day governance, risk, and compliance program. You will manage risk assessments, risk reporting, risk registers, and board dashboards to keep leadership informed of posture.

You will partner with Compliance, Internal Audit, Legal, IT, Engineering, and Product to identify, assess, mitigate, and track cybersecurity risks, while supporting audits and certifications across major frameworks.

Qualifications

• 3+ years of experience in cybersecurity GRC, IT audit, information security, or compliance.
• Hands-on experience managing risk registers and the full cyber risk management lifecycle.
• Experience supporting audits/certifications across frameworks such as NIST CSF, HITRUST, HIPAA, PCI DSS, or SOC 2.
• Familiarity with cloud and SaaS security models; ability to translate risks for leadership.

Responsibilities

• Own the day-to-day execution of the cybersecurity GRC program.
• Lead risk assessments, enterprise risk reporting, and risk register management.
• Support audits, certifications, and security questionnaires.
• Provide leadership with clear insights into risk and compliance posture.

Skills

GRC experience

Risk management

NIST CSF

HIPAA/PCI

Education

CISSP

Tools

ServiceNow GRC

Archer

OneTrust

LogicGate

AuditBoard

Job description

Insight Global seeks a cybersecurity GRC professional to own the day‑to‑day governance, risk, and compliance program. You will manage risk assessments, risk reporting, risk registers, and board dashboards to keep leadership informed of posture.

You will partner with Compliance, Internal Audit, Legal, IT, Engineering, and Product to identify, assess, mitigate, and track cybersecurity risks, while supporting audits and certifications across major frameworks.