GRC Analyst - SOC 2 & Data Governance

Tier4 Group; Atlanta (GA); On-site; USD 75,000 - 130,000; Full time

Job summary

TIER4 Group is seeking an IT Governance, Risk & Compliance (GRC) Analyst to support technology compliance, risk, and data governance programs in our Atlanta-area office. This hands-on role will help maintain SOC 2 readiness, coordinate IT controls and access reviews, and ensure audit-ready documentation across the organization.

The ideal candidate has experience in IT GRC, IT audit, cybersecurity compliance, or technology risk and is eager to grow in a collaborative environment with

Qualifications

• Experience in IT GRC, IT audit, cybersecurity compliance, or technology risk.
• Understanding of IT controls, audit evidence, and risk management concepts.
• Experience with Microsoft 365 or similar enterprise environments.

Responsibilities

• Maintain SOC 2 control calendar and coordinate recurring activities.
• Collect, review, and maintain audit evidence and documentation.
• Track control gaps, exceptions, remediation plans, and outstanding items.
• Coordinate SOC 2 readiness activities and auditor requests.
• Perform and document user and privileged access reviews.
• Support Purview initiatives including data classification, DLP, labeling, retention.
• Assist with data retention programs.
• Administer security awareness campaigns and phishing simulations.
• Maintain policies and coordinate periodic reviews.
• Review change requests for compliance and audit requirements.
• Assist with risk assessments and vendor security reviews.
• Maintain risk/remediation registers and follow up with control owners.
• Prepare compliance reporting for IT leadership.

Skills

IT GRC

SOC/SOX controls

IT audit

Documentation

Microsoft 365

Risk management

Purview

Tools

Microsoft Purview

Entra ID

Job description

TIER4 Group is seeking an IT Governance, Risk & Compliance (GRC) Analyst to support technology compliance, risk, and data governance programs in our Atlanta-area office. This hands-on role will help maintain SOC 2 readiness, coordinate IT controls and access reviews, and ensure audit-ready documentation across the organization.

The ideal candidate has experience in IT GRC, IT audit, cybersecurity compliance, or technology risk and is eager to grow in a collaborative environment with