GRC Analyst: Cyber Risk & Vendor Compliance

Coretelligent, LLC.; Northern (KY); Hybrid; USD 70,000 - 88,000; Full time

Benefits offered by this job

Health insurance

401k

Paid parental leave

Flexible vacation

Job summary

Coretelligent is seeking a diligent GRC Analyst to join our team. You will manage security awareness programs, conduct vendor risk assessments, and maintain controls frameworks across multiple client environments.

You’ll support governance, risk, and compliance programs and drive third‑party risk management activities with clients and staff. The role requires technical proficiency with security platforms and strong analytical skills, plus experience in a MSP setting.

Qualifications

• 3+ years in a GRC role focused on IT or cybersecurity controls.
• 3+ years in an IT role with cybersecurity focus.

Responsibilities

• Assist vCISO staff with client cybersecurity & governance program management.
• Update policies to align with client practices.
• Conduct vendor risk assessments and monitor vendor risk programs.
• Collaborate with departments to complete security and compliance questionnaires.
• Manage security awareness training and phishing simulations.

Skills

GRC experience

Analytical skills

Organizational skills

Problem-solving

MSP experience

Written & verbal comms

Multi-project mgmt

Ethical standards

Security platform familiarity

Tools

GRC platforms

Security awareness tools

Phishing simulation tools

Job description

Coretelligent is seeking a diligent GRC Analyst to join our team. You will manage security awareness programs, conduct vendor risk assessments, and maintain controls frameworks across multiple client environments.

You’ll support governance, risk, and compliance programs and drive third‑party risk management activities with clients and staff. The role requires technical proficiency with security platforms and strong analytical skills, plus experience in a MSP setting.