GRC & Security Assurance Analyst

OpenKrill; United States; Remote; USD 90,000 - 110,000; Full time

Job summary

bswift is seeking a motivated GRC Analyst to join our Information Security team. You will support governance, risk, compliance, and client assurance activities while partnering with Sales, Legal, Product, and other teams to address customer security inquiries and audit needs.

The role emphasizes translating complex security concepts into clear responses, maintaining evidence and control documentation, and driving program improvements in a deadline-driven environment.

Qualifications

• Bachelor's degree in Cybersecurity, Information Systems, Business Administration, Risk Management, Accounting, or related field.
• Two or more years of experience in information security, IT audit, governance, risk and compliance (GRC), or related discipline.
• Strong knowledge of information security and compliance concepts including SOC 2, access management, least privilege, segregation of duties, disaster recovery, data protection, and security testing.

Responsibilities

• Serve as primary contact for client assurance requests including security questionnaires, due diligence inquiries, RFP security sections, SOC reports, bridge letters, penetration test summaries, and other security-related documentation.
• Review and respond to detailed client security questionnaires with accurate, defensible responses aligned with policies.
• Collaborate with Sales, Client Experience, Legal, Product, and Information Security teams to gather information and respond within SLAs.
• Utilize approved security questionnaire and AI-enabled response tools to draft/refine responses while ensuring accuracy and appropriate disclosure.
• Support development, maintenance, and continuous improvement of reusable security content and documentation.
• Support internal and external audits (SOC 2 and others) by coordinating evidence requests and assisting with control documentation.
• Collect, organize, and maintain audit-ready evidence for compliance initiatives and recurring reviews.
• Assist governance, risk, and compliance processes to maintain adherence to frameworks and regulatory requirements.
• Support remediation by tracking actions and coordinating with stakeholders for timely resolution.
• Own and execute recurring User Access Reviews for critical systems and applications; coordinate with owners to ensure least-privilege alignment.
• Collect, maintain evidence for access reviews and track remediation actions with stakeholders.
• Assist in reviewing customer security addenda and contract language; provide guidance on security controls and compliance requirements.

Skills

SOC 2

Access Management

Least Privilege

Segregation of Duties

Disaster Recovery

Data Protection

Security Testing

Questionnaire Responses

Documentation

Education

Bachelor's degree in Cybersecurity

2+ years in information security / GRC

Tools

SecurityPal

Archer

OneTrust

MetricStream

Job description

bswift is seeking a motivated GRC Analyst to join our Information Security team. You will support governance, risk, compliance, and client assurance activities while partnering with Sales, Legal, Product, and other teams to address customer security inquiries and audit needs.

The role emphasizes translating complex security concepts into clear responses, maintaining evidence and control documentation, and driving program improvements in a deadline-driven environment.