GRC Analyst: Risk & Compliance with ESOP Benefits

The-Acadian-Companies; Louisiana (MO); On-site; USD 70,000 - 95,000; Full time

Benefits offered by this job

Health insurance

401(k)

Job summary

Acadian Companies in Lafayette, LA is seeking a Governance, Risk, and Compliance (GRC) Analyst to join the Information Security Department. The role focuses on operationalizing governance, risk management, and regulatory compliance while bridging security controls with business operations and leadership.

Reporting to the ISO, you will lead the C-SCRM lifecycle, manage POA&M remediation, and support policy development and annual compliance activities across HIPAA and other standards.

Qualifications

• Bachelor’s degree in cybersecurity, risk management, computer science, or related field.
• 2–5 years of professional GRC, IT audit, or cybersecurity risk management experience.
• Practical experience with NIST CSF, NIST SP 800-53, or ISO/IEC 27001; HIPAA experience preferred.

Responsibilities

• Lead third-party risk management, including vendor risk tiering and assessments.
• Maintain the Risk Register and POA&M log, track findings and remediation.
• Draft/update policies aligned with NIST CSF 2.0 and HIPAA; support UARs and IRP exercises.

Skills

GRC

Risk management

Regulatory compliance

NIST CSF

Education

Bachelor's Degree in Cybersecurity or related field

Tools

SOC 2

ISO 27001

HIPAA

Job description

Acadian Companies in Lafayette, LA is seeking a Governance, Risk, and Compliance (GRC) Analyst to join the Information Security Department. The role focuses on operationalizing governance, risk management, and regulatory compliance while bridging security controls with business operations and leadership.

Reporting to the ISO, you will lead the C-SCRM lifecycle, manage POA&M remediation, and support policy development and annual compliance activities across HIPAA and other standards.