Hybrid GRC Analyst: Risk, Compliance & Policy

Benesch, Friedlander, Coplan & Aronoff; Cleveland (OH); Hybrid; USD 99,000 - 120,000; Full time

Benefits offered by this job

Hybrid schedule

Benefits package

Job summary

Benesch, Friedlander, Coplan & Aronoff in Cleveland seeks a GRC Analyst to support governance, risk, and compliance initiatives within a growing security team. The role focuses on implementing and improving the GRC program, policy development, and audit readiness.

The position offers hybrid work arrangements, collaborative teamwork, and opportunities to influence security posture across the organization. The ideal candidate has 6+ years in security governance and strong communication skills.

Qualifications

• Bachelor's degree in Information Security, Cybersecurity, Information Technology, Business or related field, or equivalent experience; minimum six years required.
• Knowledge of ISO 27001, CIS, NIST; strong analytical and documentation skills.
• Preferred certifications include CISA, CRISC, CGRC, Security+, ISO 27001 Internal Auditor, or CISM.

Responsibilities

• Develops, maintains, and updates security policies, standards, and procedures.
• Leads third-party risk assessments, vendor evidence reviews, and continuous monitoring.
• Supports client obligations, outside counsel guidelines, and frameworks like ISO 27001, CIS, SOC 2, NIST CSF/800-53, GDPR, HIPAA, PCI.
• Helps develop security awareness programs and phishing simulations.
• Produces regular risk, compliance, and control reports using GRC tools.

Skills

Governance & Policy

Risk management

Regulatory compliance

GRC software

Education

Bachelor's degree in Information Security

Tools

SIG

Archer

OneTrust

LogicGate

ZenGRC

Job description

Benesch, Friedlander, Coplan & Aronoff in Cleveland seeks a GRC Analyst to support governance, risk, and compliance initiatives within a growing security team. The role focuses on implementing and improving the GRC program, policy development, and audit readiness.

The position offers hybrid work arrangements, collaborative teamwork, and opportunities to influence security posture across the organization. The ideal candidate has 6+ years in security governance and strong communication skills.