GRC Analyst – SOC & PCI Compliance

Compunnel Inc.; Princeton (NJ); Remote; USD 80,000 - 110,000; Full time

Job summary

A leading IT services company is seeking a Governance, Risk, and Compliance (GRC) Analyst to ensure compliance with security and regulatory requirements. The ideal candidate will have hands-on experience with SOC and PCI compliance, perform assessments, and support audits while collaborating with cross-functional teams. This full-time role offers an opportunity to contribute to the organization's compliance framework and enhance security practices.

Qualifications

• 3+ years of experience in GRC, compliance, or IT audit.
• Strong understanding of SOC reports and PCI DSS requirements.
• Familiarity with cybersecurity best practices and control frameworks.

Responsibilities

• Perform compliance assessments against SOC 1/2, PCI DSS.
• Identify and track compliance risks and remediation plans.
• Collaborate with teams to gather audit evidence.

Skills

Compliance assessments

Audit processes

Security controls

Communication skills

Problem analysis

Job description

Assistant Manager - Recruitment @ Compunnel Inc.

Job: GRC Analyst – SOC & PCI Compliance

Location: Remote

We are seeking a Governance, Risk, and Compliance (GRC) Analyst with hands-on experience in SOC 1/2 and PCI DSS compliance. The ideal candidate will be responsible for ensuring that our organization meets security, regulatory, and compliance requirements by evaluating current processes, identifying risk areas, and supporting internal and external audits.

This is not a GRC tool-specific role (e.g., Archer); instead, we are looking for someone with strong knowledge of compliance frameworks, security controls, and audit processes.

• Perform compliance assessments against standards such as SOC 1/2, PCI DSS, and internal policies
• Identify, document, and track compliance risks, gaps, and remediation plans
• Collaborate with cross-functional teams to gather audit evidence and improve controls
• Prepare and support external audits and assessments
• Maintain up-to-date documentation of policies, procedures, and controls
• Assist in developing security and compliance training and awareness materials
• Monitor and report on ongoing compliance activities and regulatory changes

Qualifications:

• 3+ years of experience in GRC, compliance, or IT audit
• Strong understanding of SOC reports (Type I/II) and PCI DSS requirements
• Familiarity with cybersecurity best practices and common control frameworks (e.g., NIST, ISO 27001)
• Experience working with auditors, regulators, or compliance partners
• Excellent written and verbal communication skills
• Ability to analyze complex problems and propose clear solutions

Seniority level

• Mid-Senior level

Employment type

• Full-time

Job function

• Finance

Industries

• IT Services and IT Consulting