GRC Analyst - Third Party Risk

United States Digital Space LLC; Boston (MA); On-site; USD 70,000 - 110,000; Full time

Job summary

United States Digital Space LLC is seeking a GRC Analyst to support our Governance, Risk, and Compliance program. You will help manage third-party vendor risk reviews and operational requests in cross-functional security workflows, emphasizing accuracy and accountability in a fast-paced environment.

You will track intake data, identify workflow trends, and help improve guidance, templates, reporting, automation, and stakeholder experience across security, legal, privacy, procurement, IT,

Qualifications

• 2+ years of experience in GRC, with third-party risk management preferred.
• Understanding of ISO 27001, NIST CSF, COSO, SOC 2, PDI-DSS.
• Highly organized with clear escalation and informed management recommendations.
• Team player in a dynamic environment.
• Bachelor’s degree in any discipline; CS/cybersecurity and risk or technology preferred.

Responsibilities

• Support day-to-day third-party vendor risk assessments and triage intake tracking through resolution.
• Perform vendor risk reviews, reassessments, and cross-functional follow-up with Security, Legal, Privacy, Procurement, IT, Finance, and business owners.
• Assist with third-party risk program management activities.

Skills

GRC experience

Cybersecurity frameworks knowledge

Organizational skills

Team player

Bachelor's degree

Education

Bachelor's degree (any discipline)

Job description

As a GRC Analyst, you will support the the company Governance, Risk, and Compliance program. You will help manage third-party vendor risk reviews, and operational requests, in cross-functional security compliance workflows. Success in this role requires strong attention to detail, responsiveness and accountability through completion in a fast-paced environment.

The key focus of this role will be helping ensure third-party vendor assessment requests are reviewed, prioritized, routed, tracked, and completed effectively. You will use intake and ticketing data to identify workflow trends, recurring questions, handoff gaps, and opportunities to improve guidance, templates, reporting, automation, and stakeholder experience.

RESPONSIBILITIES:

• Support day-to-day third-party vendor risk assessments – manage and triage GRC third-party vendor assessment intakes and accurate tracking through resolution

• Perform vendor risk reviews, reassessments, partner coordination, remediation tracking, and cross-functional follow-up with Security, Legal, Privacy, Procurement, IT, Finance, and business owners

• Assist with third-party risk program management activities

QUALIFICATIONS:

• 2+ years of experience in GRC - third-party risk management experience preferred

• Understanding of Cybersecurity compliance frameworks and cybersecurity compliance controls – ISO 27001, NIST CSF, COSO, SOC 2, PDI-DSS

• Highly organized and strong operational discipline ensuring clear and expedient escalations with informed recommendations to management

• Being a team player and working to achieve common goal in a dynamic setting

• A minimum bachelor’s degree in any discipline. Computer science, cyber security and risk or technology degrees preferred.

This role is based in the the company office located in Boston, MA. The successful candidate must be prepared to relocate if necessary to work out of the Boston, MA office.

the company is an Equal Opportunity Employer and participates in E-verify to determine employment eligibility

The the company compensation philosophy is designed to attract, motivate, and retain exceptional talent by offering competitive base salaries, meaningful equity, and consistent pay practices that reflect our mission and core values.

At the company, we view total compensation as the combination of base salary, equity, and benefits, with equity serving as a key differentiator that aligns our employees with the long-term success of the company and allows every member of our corporate team to own part of the company and share in the company’s long-term growth and success.

The U.S. base salary range for this full-time position is $70,000 - $110,000. Salary ranges are determined by role, level, and location. Within each range, individual pay is based on factors such as job-related skills, experience, performance, and relevant education or training.

In addition to the base salary, the successful candidate will also receive benefits and a generous equity package.

These ranges may be modified in the future to reflect evolving market conditions and organizational needs. While most offers will typically fall toward the starting point of the range, total compensation will depend on the candidate’s specific qualifications, expertise, and alignment with the role’s requirements.