GRC Analyst - Hybrid, 4-Day In-Office

Peregrine Technologies; Washington (District of Columbia); Sur place; USD 150 000 - 165 000; Plein temps

Résumé du poste

Peregrine Technologies is seeking a Governance, Risk, and Compliance (GRC) Analyst to strengthen and scale our security and compliance program. You will develop and maintain frameworks ensuring regulatory, contractual, and operational standards across data protection, privacy, and security.

You'll collaborate with engineering, product, and leadership teams to meet frameworks like SOC 2, CJIS, HIPAA, ISO 27001, GDPR, NIST 800-53, and FedRAMP as we expand into new markets.

Qualifications

• 7–10 years in information security, compliance, or risk management in regulated industries.
• Working knowledge of SOC 2, HIPAA, CJIS, FedRAMP, ISO 27001, NIST 800-53.
• Cloud-native SaaS environments, microservices, VPCs/VPNs, and identity management concepts such as RBAC and MFA.
• Detail-oriented with strong documentation skills.
• Collaborative and curious with strong communication.

Responsabilités

• Support the implementation, tracking, and continuous improvement of compliance frameworks (SOC 2, CJIS, HIPAA, ISO 27001, GDPR, FedRAMP, NIST 800-53).
• Manage and organize compliance documentation, internal audits, and evidence collection for both internal and external stakeholders.
• Collaborate with internal teams to update policies, procedures, and controls related to data protection, access management, and incident response.
• Maintain strong awareness of security best practices in cloud environments - particularly AWS - including services like GuardDuty, SecurityHub, Amazon Inspector, and AWS Config.
• Use compliance management tools such as Vanta, Drata, SecureFrame, or HyperProof to streamline reporting and evidence collection.
• Partner with technical teams to ensure identity and access management (IAM), MFA, and least-privilege principles are applied correctly.
• Contribute to audit readiness and help respond to customer and vendor compliance inquiries.
• Be based in one of our hubs, with a4-day-per-week in-office requirement.

Connaissances

InfoSec experience

Regulatory frameworks

Cloud security concepts

Documentation management

Collaboration

Clear communication

Outils

Vanta

Drata

SecureFrame

HyperProof

Description du poste

Peregrine Technologies is seeking a Governance, Risk, and Compliance (GRC) Analyst to strengthen and scale our security and compliance program. You will develop and maintain frameworks ensuring regulatory, contractual, and operational standards across data protection, privacy, and security.

You'll collaborate with engineering, product, and leadership teams to meet frameworks like SOC 2, CJIS, HIPAA, ISO 27001, GDPR, NIST 800-53, and FedRAMP as we expand into new markets.