Hybrid GRC Analyst - HIPAA & SOC 2 Readiness

Frontier Cybersecurity Consulting; Miami (FL); Hybrid; USD 70,000 - 100,000; Full time

Job summary

Frontier Cybersecurity Consulting in Miami, FL seeks a GRC Analyst for risk assessments, control testing, and gap analyses across HIPAA, SOC 2, ISO 27001 and more. This full-time hybrid role involves onsite client work and remote collaboration.

You will gather evidence, document policies, map controls to regulatory requirements, and prepare audit-ready artifacts. You will work with consultants and client stakeholders to design remediation plans and monitor ongoing compliance.

Qualifications

• Experience with governance, risk, and compliance practices including risk assessments and audit readiness.
• Familiarity with HIPAA, SOC 2, ISO 27001, NIST, PCI DSS and related frameworks.
• Strong writing and policy/documentation capabilities; ability to produce audit-ready reports.
• Proficiency with spreadsheets and document management tools; excellent communication.
• Ability to manage multiple projects in a hybrid work environment.

Responsibilities

• Perform risk assessments, control testing, and gap analyses for clients.
• Gather and analyze evidence; document policies and procedures.
• Map controls to regulatory and industry requirements; prepare audit-ready artifacts.
• Design remediation plans with consultants and client stakeholders; track progress.
• Support ongoing compliance monitoring and stay current on regulations.

Skills

GRC fundamentals

HIPAA, SOC 2, ISO 27001

Analytical skills

Documentation skills

Spreadsheets & docs tools

Excellent communication

Project management

Hybrid work ability

Education

Bachelor's degree

CISA/CRISC/CISSP/HCISPP

Job description

Frontier Cybersecurity Consulting in Miami, FL seeks a GRC Analyst for risk assessments, control testing, and gap analyses across HIPAA, SOC 2, ISO 27001 and more. This full-time hybrid role involves onsite client work and remote collaboration.

You will gather evidence, document policies, map controls to regulatory requirements, and prepare audit-ready artifacts. You will work with consultants and client stakeholders to design remediation plans and monitor ongoing compliance.