GRC Analyst, Entry Level

Jobright.ai; United States; Remote; USD 50,000 - 70,000; Full time

Job summary

Jobright.ai seeks an entry-level GRC Analyst to support governance, risk, and compliance operations by maintaining risk documentation, coordinating assessments, and preparing audit evidence.

You will collaborate with security, legal, and operations teams while tracking findings and remediation efforts in a remote environment.

Qualifications

• Basic understanding of governance, risk, compliance, or information security concepts
• Strong attention to detail, organization, and written communication
• Ability to interpret requirements and document evidence clearly
• Comfort working with spreadsheets, trackers, and structured review processes
• Ability to manage priorities independently in a remote environment

Responsibilities

• Maintain risk registers, control inventories, and compliance evidence
• Assist with control assessments, gap analyses, and remediation tracking
• Collect and organize evidence for audits and customer security reviews
• Help update policies, procedures, and security documentation
• Track findings, owners, due dates, and status through completion
• Prepare clear reports and collaborate with security, legal, and operations teams

Skills

Governance basics

Risk management

Compliance basics

Information security concepts

Attention to detail

Written communication

Independent remote work

Tools

Spreadsheets

Tracker tools

Job description

Jobright is a personal AI job search agent that simplifies and accelerates the job search process. The entry-level GRC Analyst supports governance, risk, and compliance operations by maintaining risk and control documentation, coordinating assessments and remediation, preparing audit evidence, and collaborating on security and business requirements.

Why Join Us

• Build real, production AI agents used by real users
• High ownership and impact
• Work at the intersection of AI, agents, and product
• Shape how people experience AI-driven job search

Responsibilities

• Maintain risk registers, control inventories, and compliance evidence
• Assist with control assessments, gap analyses, and remediation tracking
• Collect and organize evidence for audits and customer security reviews
• Help update policies, procedures, and security documentation
• Track findings, owners, due dates, and status through completion
• Prepare clear reports and collaborate with security, legal, and operations teams

Qualification

Required

• Basic understanding of governance, risk, compliance, or information security concepts
• Strong attention to detail, organization, and written communication
• Ability to interpret requirements and document evidence clearly
• Comfort working with spreadsheets, trackers, and structured review processes
• Ability to manage priorities independently in a remote environment

Preferred

• Exposure to NIST, ISO 27001, SOC 2, CIS Controls, or similar frameworks
• Internship, coursework, certification, or project experience in security, audit, or compliance
• Familiarity with GRC, ticketing, document management, or risk tracking tools
• Security+, ISO 27001 Foundation, or another entry-level certification