GRC Analyst, Security & Compliance Strategist

peregrinetechnologies; Washington; Vor Ort; USD 150.000 - 165.000; Vollzeit

Zusammenfassung

Peregrine Technologies is seeking a Governance, Risk, and Compliance (GRC) Analyst to help strengthen and scale our security and compliance program. You will develop and maintain frameworks to meet regulatory, contractual, and operational standards across data protection, privacy, and security.

You will collaborate with engineering, product, and leadership to ensure compliance with SOC 2, CJIS, HIPAA, ISO 27001, GDPR, NIST 800-53, and FedRAMP as we expand into new markets.

Qualifikationen

• 7-10 years of experience in information security, compliance, or risk management within regulated industries.
• Working knowledge of SOC 2, HIPAA, CJIS, FedRAMP, ISO 27001, NIST 800-53, or similar frameworks.
• Understanding of cloud-native SaaS environments, microservices, VPCs/VPNs, and identity management concepts such as RBAC and MFA.
• Detail-Oriented: thrives on structure, accuracy, and documentation.
• Collaborative and curious with ability to translate security concepts for diverse audiences.

Aufgaben

• Support implementation, tracking, and improvement of compliance frameworks (SOC 2, CJIS, HIPAA, ISO 27001, GDPR, FedRAMP, NIST 800-53).
• Manage compliance documentation, audits, and evidence for stakeholders.
• Collaborate with teams to update policies and controls on data protection and incident response.
• Maintain security practices in AWS environments and related services.
• Assist with audit readiness and respond to inquiries.
• Be in-office 4 days per week in NYC or Washington, D.C.

Kenntnisse

Security governance

Compliance management

Documentation proficiency

Cross-functional collaboration

Tools

Vanta

Drata

SecureFrame

HyperProof

AWS

Jobbeschreibung

Peregrine Technologies is seeking a Governance, Risk, and Compliance (GRC) Analyst to help strengthen and scale our security and compliance program. You will develop and maintain frameworks to meet regulatory, contractual, and operational standards across data protection, privacy, and security.

You will collaborate with engineering, product, and leadership to ensure compliance with SOC 2, CJIS, HIPAA, ISO 27001, GDPR, NIST 800-53, and FedRAMP as we expand into new markets.