Hybrid GRC Analyst | Risk & Compliance

Benesch; Chicago (IL); Hybrid; USD 109,000 - 131,000; Full time

Benefits offered by this job

Hybrid work schedule

Benefits package

Job summary

Benesch is seeking a GRC Analyst in Chicago with 6+ years of experience to support governance, risk, and compliance programs. The role focuses on policy development, risk assessments, and regulatory alignment within a growing security team.

Hybrid work arrangement in a professional services setting, with responsibilities spanning policy governance, audit support, and continuous improvement of the GRC program.

Qualifications

• Requires a bachelor's degree in Information Security, Cybersecurity, Information Technology, Business or related field, or equivalent experience.
• Minimum of six years' experience in GRC/security roles.
• Certifications such as CISA, CRISC, CGRC, Security+, ISO 27001 Internal Auditor, or CISM preferred.

Responsibilities

• Develops, maintains security policies, standards and procedures.
• Leads third-party risk management and vendor assessments.
• Supports audits, regulatory and certification processes with evidence collection.
• Assists with compliance efforts related to client obligations and frameworks.
• Helps develop security awareness programs and phishing simulations.
• Produces regular risk, compliance and control reports using GRC tools.

Skills

Risk management

Cybersecurity principles

Documentation

Stakeholder management

Communication

Analytical skills

Education

Bachelor’s degree in Information Security / Cybersecurity / IT / Business

Tools

SIG

Archer

OneTrust

LogicGate

ZenGRC

Job description

Benesch is seeking a GRC Analyst in Chicago with 6+ years of experience to support governance, risk, and compliance programs. The role focuses on policy development, risk assessments, and regulatory alignment within a growing security team.

Hybrid work arrangement in a professional services setting, with responsibilities spanning policy governance, audit support, and continuous improvement of the GRC program.