GRC Cybersecurity Analyst (SOX/ISO) — Hybrid

Urbint; United States; Hybrid; USD 28,000 - 44,000; Full time

Benefits offered by this job

Private healthcare

Hybrid work

Professional development

Job summary

Itron is seeking a Cybersecurity GRC Analyst to support global governance and regulatory compliance programs across SOX, ISO 27001/27002/27017, and SSAE-18. This role collaborates with Information Security, Internal Audit, Legal, Compliance, IT Operations, and business teams to assess control effectiveness and track remediation.

The position involves gap assessments, maintaining obligation registers, coordinating audits, and providing clear regulatory reporting.

Qualifications

• Bachelor's degree in Cybersecurity, Business Administration or related field or equivalent work experience.
• At least 1 year in information security governance, compliance, audit, risk management, IT controls, or related disciplines.
• Experience with SOX, ISO 27001/27002, SSAE-18, NIS2, SOCI, or Cyber Essentials is preferred.

Responsibilities

• Assist in managing cybersecurity compliance activities across multiple frameworks and countries including EU NIS2, Australia SOCI, UK Cyber Essentials.
• Translate regulatory obligations into actionable security controls and processes with internal teams.
• Conduct compliance gap assessments and maintain remediation plans through closure.
• Maintain regulatory obligation registers, compliance trackers, evidence repositories, and status reporting artifacts.
• Monitor emerging cybersecurity regulations and provide remediation guidance for audits.

Skills

Analytical thinking

Documentation

Written communication

Independent work

Cross-functional collaboration

Education

Bachelor's degree in Cybersecurity or related field

CISA / CISM / CRISC / CISSP certifications

Tools

Auditboard/Optro

Archer

ServiceNow GRC

Job description

Itron is seeking a Cybersecurity GRC Analyst to support global governance and regulatory compliance programs across SOX, ISO 27001/27002/27017, and SSAE-18. This role collaborates with Information Security, Internal Audit, Legal, Compliance, IT Operations, and business teams to assess control effectiveness and track remediation.

The position involves gap assessments, maintaining obligation registers, coordinating audits, and providing clear regulatory reporting.