Hybrid GRC Analyst: Risk, Compliance & Policy

Benesch; Cleveland (OH); Hybrid; USD 99,000 - 120,000; Full time

Benefits offered by this job

Hybrid schedule

Benefits package

Job summary

Benesch seeks a GRC Analyst in the Cleveland office to support governance, risk, and compliance initiatives. The role focuses on policy development, third-party risk management, and regulatory alignment within a growing security division.

Ideal candidates have 6+ years in GRC, familiarity with frameworks like ISO 27001, CIS, SOC 2, NIST CSF, and strong analytical and stakeholder management skills. Hybrid work model with work-from-home flexibility and a comprehensive benefits package offered.

Qualifications

• Bachelor’s degree or equivalent professional experience in Information Security, Cybersecurity, IT, or Business.
• Certifications such as CISA, CRISC, CGRC, Security+, ISO 27001 Internal Auditor, or CISM are preferred.
• Minimum six years of experience in GRC or related field.

Responsibilities

• Develops, maintains, and updates security and compliance policies, standards, and procedures.
• Leads third-party risk management and conducts risk assessments across units.
• Assists with compliance efforts for client obligations and regulatory frameworks.
• Helps develop security awareness programs and conducts phishing simulations.
• Produces reports on risk, compliance posture, and control effectiveness.

Skills

Stakeholder management

Analytical skills

Documentation

Cybersecurity concepts

GRC familiarity

Education

Bachelor’s degree in information security/cybersecurity/IT/business

CISA

CRISC

CGRC

Security+

ISO 27001 Internal Auditor

CISM

Tools

SIG

Archer

OneTrust

LogicGate

ZenGRC

Job description

Benesch seeks a GRC Analyst in the Cleveland office to support governance, risk, and compliance initiatives. The role focuses on policy development, third-party risk management, and regulatory alignment within a growing security division.

Ideal candidates have 6+ years in GRC, familiarity with frameworks like ISO 27001, CIS, SOC 2, NIST CSF, and strong analytical and stakeholder management skills. Hybrid work model with work-from-home flexibility and a comprehensive benefits package offered.