GRC Analyst: Risk & Compliance Specialist

City of Indianapolis; Indianapolis (IN); On-site; USD 75,000 - 95,000; Full time

Benefits offered by this job

Life Insurance

Retirement plan

Job summary

City of Indianapolis Marion County Governance, Risk, and Compliance (GRC) Analyst position focuses on implementing internal control reviews, testing access reviews, vendor assessments, and security reviews. The role supports regulatory compliance and policy adherence under the CISO’s supervision.

The analyst will monitor CIS Benchmarks, NIST, CJIS, PCI, and related standards, develop scalable assessment templates, and manage vendor risk while collaborating with agency partners to improve data

Qualifications

• Bachelor’s degree in computer science, information systems, information technology, or related field or equivalent work experience.
• 2–3 years of governance, risk, and compliance experience.
• Strong understanding of risk assessment methodologies and control frameworks (COSO, COBIT, NIST).
• Familiarity with CIS Benchmarks, NIST, CJIS, PCI and related standards.
• Familiarity with platforms including Microsoft Security suite and ServiceNow.
• Excellent analytical and attention to detail; strong written and verbal communication.
• Ability to work independently and as part of a team.

Responsibilities

• Ensure adherence to regulatory requirements and internal policies.
• Monitor CIS Benchmarks, NIST, CJIS, PCI and other standards; support policy guidance.
• Develop templates for scalable vendor assessments and solutions.
• Manage third-party risk via a Vendor Risk Management program.
• Build relationships with agency partners and vendors for collaborative assessments.
• Track contractual security deliverables for ISA contracts and ensure compliance.
• Maintain risk and compliance register to guide strategic decisions.
• Assist in incident documentation, root cause analysis, and remediation.
• Collaborate on data security controls and information protection.
• Support ticket management in ServiceNow and reporting of tracked items.
• Contribute to standards and documentation for data governance and risk management.

Skills

Analytical skills

Attention to detail

Verbal and written communication

Independent working

Team collaboration

Platform familiarity

Risk management understanding

Education

Bachelor’s degree in computer science or related field

Master’s degree in related field (preferred)

Tools

Microsoft Security suite

ServiceNow

Job description

City of Indianapolis Marion County Governance, Risk, and Compliance (GRC) Analyst position focuses on implementing internal control reviews, testing access reviews, vendor assessments, and security reviews. The role supports regulatory compliance and policy adherence under the CISO’s supervision.

The analyst will monitor CIS Benchmarks, NIST, CJIS, PCI, and related standards, develop scalable assessment templates, and manage vendor risk while collaborating with agency partners to improve data