GRC & App Security Analyst — Hybrid (KY)

Quantam; Frankfort (KY); Hybrid; USD 55,000 - 83,000; Full time

Benefits offered by this job

Health benefits

Paid time off

401(k) plan

Job summary

Quantam Solutions in Frankfort, KY, is seeking an Information Security GRC Analyst to lead governance, risk management, and compliance initiatives. The role focuses on developing and maintaining security policies, coordinating audits, performing risk assessments, and ensuring alignment with NIST, ISO 27001, SOC 2, HIPAA, PCI-DSS, and GDPR.

You will work with IT, legal, HR, and external auditors to strengthen controls, manage audit evidence, and drive remediation.

Qualifications

• 4–7 years of experience in Information Security, GRC, IT Risk Management, or Security Audit and Compliance.
• Experience developing and maintaining information security policies, standards, and procedures.
• Strong understanding of security frameworks and regulations such as NIST 800-53, ISO 27001, SOC 2, HIPAA, PCI-DSS, or GDPR.
• Hands-on experience supporting security audits, compliance assessments, and audit evidence collection.
• Experience conducting risk assessments, control gap analyses, and remediation tracking.

Responsibilities

• Develop and maintain information security policies, standards, and procedures aligned with frameworks such as NIST, ISO 27001, and SOC 2.
• Coordinate internal and external security audits and compile evidence for assessments.
• Assist with SOC 2, ISO 27001, and other regulatory or compliance assessments.
• Track audit findings and remediation actions through closure.
• Identify compliance gaps and recommend improvements.
• Collaborate with IT, security, and business stakeholders to strengthen controls.

Skills

GRC

Policy development

Audits & compliance

Risk assessment

Vulnerability management

OWASP Top 10

Education

Bachelor's degree in Cybersecurity

Tools

Jenkins

GitHub Actions

Azure DevOps

HashiCorp Vault

AWS Secrets Manager

Job description

Quantam Solutions in Frankfort, KY, is seeking an Information Security GRC Analyst to lead governance, risk management, and compliance initiatives. The role focuses on developing and maintaining security policies, coordinating audits, performing risk assessments, and ensuring alignment with NIST, ISO 27001, SOC 2, HIPAA, PCI-DSS, and GDPR.

You will work with IT, legal, HR, and external auditors to strengthen controls, manage audit evidence, and drive remediation.