GRC Analyst: Security Governance & Risk

NorthMark Strategies LLC; Dallas (TX); On-site; USD 95,000 - 125,000; Full time

Benefits offered by this job

Company-Paid Lunch Stipend

Employer-Paid Medical (HDHP) including

Dental and Vision benefits

Paid Parental Leave (16 weeks)

401(k) match up to 6%

HSA options

PTO 25 days + 12 holidays

Job summary

NorthMark Strategies LLC is hiring a GRC Analyst to join the Information Security team in Dallas, TX. You will drive governance processes, risk assessments, policy library management, and cross‑functional coordination with Engineering, Product, Legal, and Operations.

You will author risk summaries for executives and maintain the enterprise risk register, ensuring compliance and effective risk mitigation across the organization.

Qualifications

• Bachelor’s degree or equivalent experience in IT, information security, or risk.
• 4–8 years in GRC, information security governance, compliance, or risk.
• Experience owning or contributing to security change management, risk assessment, or policy management.
• Familiarity with ISO 27001, SOC 2 TSC, NIST CSF, NIST SP 800-53, or CIS Controls.
• Experience drafting, reviewing, and publishing security policies, standards, and procedures.
• Knowledge of risk registers and reporting on information security risks.
• Experience with GRC automation platforms and Jira/Confluence for tracking.

Responsibilities

• Own and operate the security change management review process with stakeholders.
• Conduct risk assessments, vendor reviews, and maintain risk registers.
• Publish policy library updates aligned to ISO 27001, SOC 2, and NIST standards.
• Develop risk dashboards and executive summaries for CISO and leadership.
• Collaborate with Engineering, Product, Legal, HR, and Operations on governance questions.
• Support compliance metrics and ensure adherence across the business.

Skills

GRC

Information security governance

Risk management

Security change management

Risk assessment

Policy management

ISO 27001

SOC 2

NIST CSF

NIST SP 800-53

CISM

CRISC

CISA

CISSP

ISO 27001 Lead Implementer

Lead Auditor

CompTIA Security+

Policy language

Stakeholder engagement

Education

Bachelor’s degree in Information Systems, Computer Science, Business Administration, or related field

Tools

ServiceNow GRC

Vanta

Drata

Hyperproof

Archer

Jira

Confluence

Job description

NorthMark Strategies LLC is hiring a GRC Analyst to join the Information Security team in Dallas, TX. You will drive governance processes, risk assessments, policy library management, and cross‑functional coordination with Engineering, Product, Legal, and Operations.

You will author risk summaries for executives and maintain the enterprise risk register, ensuring compliance and effective risk mitigation across the organization.