GRC Analyst: Risk, Compliance & Security Awareness

Protective; United States; Remote; USD 70,000 - 77,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Mental health support

Paid time off

Parental leave

401(k) match

ProHealth Rewards

Job summary

Protective is seeking a Security Risk Analyst to strengthen our Information Security program in the United States. The role focuses on regulatory compliance, risk assessments, and vendor risk management while collaborating with legal, compliance, and technology teams.

You will drive awareness, governance, and continuous improvement across the organization. You will work with tools like ServiceNow, Archer, Power BI, and SharePoint to measure program effectiveness, report to leadership, and

Qualifications

• GRC, risk management, and compliance experience within cybersecurity.
• Familiarity with industry standards and audit processes.
• Understanding of third-party/vendor risk management processes.

Responsibilities

• Perform enterprise risk assessments using NIST CSF, NIST 800-53, SOC 2, and CIS.
• Analyze vulnerability reports to support remediation and risk reduction.
• Develop and execute security awareness programs and training.
• Deliver reporting and dashboards for leadership on risk posture and controls.
• Lead end-to-end third-party risk assessments and vendor lifecycle management.
• Drive GRC tooling and workflow optimization.
• Support governance, standards, and control libraries.
• Prepare audit evidence and support external inquiries.
• Stay current on evolving regulations and industry trends.
• Manage priorities with Agile methodologies.

Skills

GRC

Risk management

Compliance

TPRM

Cloud security

Power BI

ServiceNow

Archer

SharePoint

Education

Bachelor's degree in Cybersecurity or Information Systems

Tools

SharePoint

Power BI

ServiceNow

UpGuard

Archer

Job description

Protective is seeking a Security Risk Analyst to strengthen our Information Security program in the United States. The role focuses on regulatory compliance, risk assessments, and vendor risk management while collaborating with legal, compliance, and technology teams.

You will drive awareness, governance, and continuous improvement across the organization. You will work with tools like ServiceNow, Archer, Power BI, and SharePoint to measure program effectiveness, report to leadership, and