GRC Analyst II - Security Governance & Compliance Lead

Bright Defense, LLC.; United States; Remote; USD 70,000 - 90,000; Full time

Job summary

A security consulting company in the United States is looking for a GRC Analyst II to support governance programs for clients. In this role, you will onboard customers, perform gap assessments, and develop security policies. The ideal candidate will have 2-3 years in information security and excellent communication skills. This position demands a collaborative mindset and a solid understanding of security frameworks. Join us to help strengthen our clients' security posture.

Qualifications

• 2–3 years of relevant experience in information security, compliance, or risk management.
• Exceptional written and verbal communication skills.
• Solid understanding of common security frameworks (ISO 27001, SOC 2, NIST CSF).
• Proven experience developing and implementing security policies and controls.
• Strong attention to detail and ability to manage multiple tasks.

Responsibilities

• Support customer onboarding and ensure clients understand their security program.
• Perform gap assessments against security frameworks.
• Draft and maintain information security policies and procedures.
• Explain governance frameworks and policy requirements to stakeholders.
• Develop and track risk registers and mitigation plans.
• Prepare high-quality documentation and status reports for customers.

Skills

Information security

Compliance

Risk management

Verbal communication

Written communication

Attention to detail

Collaboration

Job description

A security consulting company in the United States is looking for a GRC Analyst II to support governance programs for clients. In this role, you will onboard customers, perform gap assessments, and develop security policies. The ideal candidate will have 2-3 years in information security and excellent communication skills. This position demands a collaborative mindset and a solid understanding of security frameworks. Join us to help strengthen our clients' security posture.