GRC Cybersecurity Analyst: Risk & Compliance

VoltaGrid LLC; Houston, Northern (TX, KY); Hybrid; USD 90,000 - 120,000; Full time

Job summary

VoltaGrid is seeking a Cybersecurity Risk & Compliance Analyst to formalize and scale our risk governance, compliance, and policy framework across IT and OT environments.

You will drive structure in risk, controls, policies, and audit readiness, ensuring alignment with regulatory requirements and real-world operations. The role emphasizes measurable governance and scalable processes to support secure growth.

Qualifications

• 3-6 years of experience in GRC, cybersecurity compliance, risk management, or related roles.
• Strong understanding of common frameworks and standards such as SOC 2, ISO 27001, and NIST CSF.
• Experience developing and managing policies, controls, and risk assessments.
• Familiarity with audit processes and evidence management.
• Ability to translate technical and regulatory requirements into practical processes.
• Strong organizational, analytical, and communication skills.

Responsibilities

• Develop, implement, and maintain cybersecurity policies, standards, and procedures, ensuring they are clear, actionable, and aligned with organizational needs.
• Own and manage risk assessment processes, including identifying, evaluating, and tracking risks across IT and operational technology environments.
• Support and drive compliance initiatives (e.g., SOC 2, ISO 27001), including control design, evidence collection, and audit coordination.
• Establish and maintain a control framework that aligns security practices with regulatory and business requirements.
• Partner with engineering, IT, and operations teams to ensure controls are implemented effectively and embedded into workflows.
• Manage and track risk registers, control gaps, and remediation efforts, providing visibility to leadership.
• Support third-party risk management, including vendor assessments and ongoing monitoring.
• Collaborate with cybersecurity and technology teams to align security tooling and monitoring with compliance and risk objectives.
• Assist in developing and maintaining security awareness and policy training programs.
• Produce clear, executive-ready reporting on risk posture, compliance status, and program maturity.
• Continuously evaluate and improve the organization’s governance model, processes, and documentation.

Skills

GRC

Risk management

Cybersecurity compliance

Policy development

Audit coordination

Stakeholder communication

Vendor risk management

Regulatory frameworks

Tools

Drata

Job description

VoltaGrid is seeking a Cybersecurity Risk & Compliance Analyst to formalize and scale our risk governance, compliance, and policy framework across IT and OT environments.

You will drive structure in risk, controls, policies, and audit readiness, ensuring alignment with regulatory requirements and real-world operations. The role emphasizes measurable governance and scalable processes to support secure growth.