GRC Analyst — Operational Resilience & Compliance

Zoro Tools, Inc.; Chicago (IL); Hybrid; USD 59,000 - 99,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Life insurance

Maternity support

Paid parental leave

Therapy sessions

Paid time off

401K matching

Job summary

Zoro Tools, Inc. is seeking a Governance, Risk & Compliance (GRC) Analyst in Chicago with a hybrid work model.

You will support the governance, risk, and compliance program focused on Operational Resilience, including BCDR, IRP, SOX, and TPRM, while coordinating cross-functional teams. The ideal candidate has 2–5 years of IT Audit/GRC experience, familiarity with frameworks like COSO, COBIT, NIST CSF, and relevant certifications.

Qualifications

• Familiarity with GRC disciplines including BCDR, IRP, SOX, TPRM, and technology risk management.
• Knowledge of SOX IT requirements, COSO, COBIT, NIST CSF, PCAOB, and PCI-DSS standards.
• Understanding ITGCs, ITACs, UARs, SoD, and governance practices.
• Experience coordinating cross-functional initiatives with business and technology stakeholders.
• Experience with cloud environments, enterprise apps, databases, and operating systems.
• Strong organizational, analytical, and problem-solving skills with the ability to handle multiple priorities.
• Ability to clearly communicate technical concepts to diverse stakeholders.
• 2–5 years in IT Audit/GRC/Cybersecurity/Consulting.
• Relevant certifications such as CISA, CRISC, CISSP, or CIA preferred.

Responsibilities

• Coordinate and improve BCDR, BIAs, and annual plan refreshes with stakeholders.
• Facilitate continuity and disaster recovery exercises and testing; document results and drive improvements.
• Develop program metrics and enhance organizational resilience beyond minimum requirements.
• Maintain IRP governance docs and coordinate annual reviews and tabletop exercises.
• Coordinate post-incident remediation and track high-priority action items.
• Support governance, risk, and compliance initiatives including policy development and audit readiness.
• Collaborate with teams to strengthen governance processes and risk documentation.
• Assist with expanding SOX scope and implementing new technology controls.
• Support TPRM through vendor risk assessments and SOC report reviews.

Skills

GRC knowledge

Cross-functional collaboration

Analytical skills

Effective communication

Organizational skills

Education

Bachelor's degree preferred

Tools

Auditboard

OneTrust

Zilla Security

G-Suite

Lucidchart

Smartsheets

Slack

Jira

Job description

Zoro Tools, Inc. is seeking a Governance, Risk & Compliance (GRC) Analyst in Chicago with a hybrid work model.

You will support the governance, risk, and compliance program focused on Operational Resilience, including BCDR, IRP, SOX, and TPRM, while coordinating cross-functional teams. The ideal candidate has 2–5 years of IT Audit/GRC experience, familiarity with frameworks like COSO, COBIT, NIST CSF, and relevant certifications.