GRC Analyst - SOC 2 & GovRAMP Lead (Remote)

Infotech; Tallahassee (FL); Remote; USD 85,000 - 130,000; Full time

Benefits offered by this job

Health benefits

Wellness support

Flexible time off

Paid holidays

Education and leadership programs

Inclusive culture

Job summary

Infotech is seeking a GRC Analyst to run the day-to-day work of our SOC 2 Type II and GovRAMP programs, partnering with engineering, IT, and business teams to collect evidence, document controls, and close gaps.

The role sits on the Security & Compliance team within Platform Engineering and emphasizes collaboration, policy development, and audit readiness across multiple programs.

Qualifications

• 5+ years of experience in GRC, security compliance, or IT audit.
• Ownership of at least one SOC 2 Type II or GovRAMP cycle or assessment.
• Experience writing security policies and control documentation.
• Ability to coordinate deliverables across several teams and drive progress.
• Familiarity with policy as code and cloud security controls.
• Clear communication with auditors, engineers, and executives.
• Ability to lead, investigate, and coordinate security incidents.

Responsibilities

• Own SOC 2 Type II evidence collection and readiness for each audit cycle.
• Support GovRAMP assessments, including evidence packages and POA&M.
• Draft and maintain security policies and narratives aligned with SOC 2 and NIST.
• Administer Vanta and automate evidence collection to reduce manual work.
• Perform risk and third-party assessments and verify AWS controls.
• Coordinate penetration tests, track findings to closure, manage security questionnaires.
• Provide backup coverage for audit and assessment activity as needed.

Skills

GRC experience

Security compliance

Auditing coordination

Policy writing

Communications

Tools

Vanta

Drata

AWS

APIs scripting

Job description

Infotech is seeking a GRC Analyst to run the day-to-day work of our SOC 2 Type II and GovRAMP programs, partnering with engineering, IT, and business teams to collect evidence, document controls, and close gaps.

The role sits on the Security & Compliance team within Platform Engineering and emphasizes collaboration, policy development, and audit readiness across multiple programs.