GRC Policy & Risk Analyst — Onsite

Gravity IT Resources; South Jordan (UT); On-site; USD 83,000 - 124,000; Full time

Job summary

Gravity IT Resources, onsite in Salt Lake County, Utah, is seeking a GRC Analyst to strengthen governance, risk, and compliance practices. You will translate audit findings into actionable remediation plans and rewrite policies to align with standards, creating clear documentation for stakeholders.

The role requires strong writing and communication skills, collaboration across IT, security, and business teams, and the ability to drive remediation initiatives organization-wide.

Qualifications

• Experience in Governance, Risk & Compliance (GRC), information security, IT risk management, audit remediation.
• Proven ability to translate audit findings into remediation plans.
• Strong skills in writing, revising, and maintaining security policies and procedures.
• Excellent written and verbal communication for technical and nontechnical audiences.

Responsibilities

• Review audit findings, security assessments, and compliance documentation to identify gaps.
• Develop actionable remediation plans to address gaps and improve security.
• Rewrite and update security policies to align with standards.
• Create new policies, procedures, standards, and supporting documentation.
• Translate requirements into clear, structured plans and reports.
• Collaborate with IT, security, compliance, and business teams to validate requirements.
• Track remediation activities and evidence collection.
• Suggest improvements to governance processes and controls.

Skills

GRC

Audit remediation

Policy development

Technical writing

Job description

Gravity IT Resources, onsite in Salt Lake County, Utah, is seeking a GRC Analyst to strengthen governance, risk, and compliance practices. You will translate audit findings into actionable remediation plans and rewrite policies to align with standards, creating clear documentation for stakeholders.

The role requires strong writing and communication skills, collaboration across IT, security, and business teams, and the ability to drive remediation initiatives organization-wide.