GRC Cybersecurity Analyst: Risk, Policy & Compliance

VoltaGrid; Houston (TX); Hybrid; USD 85,000 - 125,000; Full time

Job summary

VoltaGrid is seeking a Cybersecurity Risk & Compliance Analyst to formalize and scale our risk governance, compliance, and policy framework across IT and operational environments. The role focuses on transforming cybersecurity from reactive support to structured governance, driving clear risk management, controls, and audit readiness aligned with regulatory needs.

The ideal candidate will translate complex requirements into practical processes, enabling scalable, governance-driven operations

Qualifications

• 3–6 years of experience in GRC, cybersecurity compliance, risk management, or related roles.
• Strong understanding of common frameworks and standards such as SOC 2, ISO 27001, NIST CSF or similar.
• Experience developing and managing policies, controls, and risk assessments.
• Familiarity with audit processes and evidence management.
• Ability to translate technical and regulatory requirements into practical processes.
• Strong organizational, analytical, and communication skills.

Responsibilities

• Develop, implement, and maintain cybersecurity policies, standards, and procedures, ensuring they are clear, actionable, and aligned with organizational needs.
• Own and manage risk assessment processes, including identifying, evaluating, and tracking risks across IT and operational technology environments.
• Support and drive compliance initiatives (e.g., SOC 2, ISO 27001), including control design, evidence collection, and audit coordination.
• Establish and maintain a control framework that aligns security practices with regulatory and business requirements.
• Partner with engineering, IT, and operations teams to ensure controls are implemented effectively and embedded into workflows.
• Manage and track risk registers, control gaps, and remediation efforts, providing visibility to leadership.
• Support third-party risk management, including vendor assessments and ongoing monitoring.
• Collaborate with cybersecurity and technology teams to align security tooling and monitoring with compliance and risk objectives.
• Assist in developing and maintaining security awareness and policy training programs.
• Produce clear, executive-ready reporting on risk posture, compliance status, and program maturity.
• Continuously evaluate and improve the organization’s governance model, processes, and documentation.

Skills

GRC

Cybersecurity compliance

Risk management

Regulatory compliance

Audit readiness

Policy development

Vendor risk management

Drata

Tools

Drata

Job description

VoltaGrid is seeking a Cybersecurity Risk & Compliance Analyst to formalize and scale our risk governance, compliance, and policy framework across IT and operational environments. The role focuses on transforming cybersecurity from reactive support to structured governance, driving clear risk management, controls, and audit readiness aligned with regulatory needs.

The ideal candidate will translate complex requirements into practical processes, enabling scalable, governance-driven operations