GRC Cybersecurity Analyst — Audit & Compliance

Clinisoltech; United States; On-site; USD 80,000 - 90,000; Full time

Job summary

Clinisol Tech Inc. is seeking a Cyber Security GRC Analyst to support Governance, Risk, and Compliance (GRC) initiatives. You will help manage security frameworks, support audit readiness, conduct risk assessments, and ensure compliance with industry standards to strengthen the organization's overall security and regulatory posture.

The role emphasizes collaboration with IT, Security, and business teams to prepare audit-ready documentation and evidence across NIST, ISO 27001, and SOC 2 controls.

Qualifications

• Bachelor's degree in Cyber Security, Information Technology, Information Systems, or a related field.
• 4+ years of experience in IT Audit, GRC, Compliance, or Risk Management.
• Working knowledge of NIST CSF / NIST 800-53, ISO 27001, SOC 2, and security control frameworks.
• Experience supporting audits, compliance initiatives, and policy management.
• Strong organizational, analytical, communication, and problem-solving skills.

Responsibilities

• Support control testing and evidence collection for NIST, ISO 27001, and SOC 2 requirements.
• Experience with GRC platforms such as ServiceNow GRC/IRM, RSA Archer, or OneTrust.
• Conduct compliance gap assessments and track remediation activities.
• Develop and maintain security policies, standards, and compliance documentation.
• Perform third-party and vendor risk assessments.
• Collaborate with IT, Security, and business teams during audit and compliance activities.
• Prepare audit-ready documentation, reports, and compliance evidence.

Skills

GRC basics

Risk assessment

Audit readiness

Policy development

Communication

Education

Bachelor's degree in Cyber Security, Information Technology, Information Systems, or a related field

Tools

ServiceNow GRC/IRM

RSA Archer

OneTrust

Job description

Clinisol Tech Inc. is seeking a Cyber Security GRC Analyst to support Governance, Risk, and Compliance (GRC) initiatives. You will help manage security frameworks, support audit readiness, conduct risk assessments, and ensure compliance with industry standards to strengthen the organization's overall security and regulatory posture.

The role emphasizes collaboration with IT, Security, and business teams to prepare audit-ready documentation and evidence across NIST, ISO 27001, and SOC 2 controls.