Hybrid GRC Security Analyst (Contract-to-Hire) - Boston/NYC

Planet Group; Boston (MA); Hybrid; USD 69,000 - 83,000; Full time

Job summary

Planet Group, partnering with a Boston based company, seeks a Governance and Risk Compliance Specialist (GRC) in Boston, MA or New York City. The role focuses on information security governance, risk, and compliance, including policy development, audit support, and vulnerability tracking.

The position offers hybrid work with two days onsite per week in Boston or NYC, contract-to-hire employment, and a pay rate of $50-$60 per hour.

Qualifications

• Experience in information security, governance, risk, and compliance.
• Experience developing security policies and compliance documentation.
• Background supporting security audits and evidence collection.
• Understanding of application access governance, user access reviews, and access documentation.
• Experience reviewing security reports, tracking vulnerabilities, and coordinating remediation activities.
• Strong analytical and reporting skills.
• Excellent written and verbal communication skills.
• Strong organizational skills with attention to detail.
• Proactive problem-solving and process improvement.
• Ability to collaborate across Security, Engineering, Infrastructure, and IT teams.

Responsibilities

• Develop and maintain information security policies, procedures, and supporting documentation aligned with frameworks and business requirements.
• Coordinate audit requests, gather evidence, and work with internal teams to respond to external auditors.
• Support data protection, privacy, and information security compliance initiatives.
• Conduct periodic application access reviews and maintain access records.
• Assist with documentation and provisioning for new applications and users.
• Review vulnerability scan results and organize findings by severity and affected asset.
• Coordinate with application owners and Infrastructure to track remediation progress and escalate as needed.
• Consolidate security metrics from multiple sources into clear management reports.
• Identify and communicate security and risk trends, remediation priorities, and open items.
• Support security awareness training and reporting of completion and activity.

Skills

Info security

Policy development

Audit support

Access reviews

Vulnerability tracking

Reporting skills

Communication skills

Organizational skills

Problem solving

Cross-functional collaboration

Tools

Qualys

KnowBe4

CrowdStrike

Microsoft Intune

Jamf

Clarity Security

Job description

Planet Group, partnering with a Boston based company, seeks a Governance and Risk Compliance Specialist (GRC) in Boston, MA or New York City. The role focuses on information security governance, risk, and compliance, including policy development, audit support, and vulnerability tracking.

The position offers hybrid work with two days onsite per week in Boston or NYC, contract-to-hire employment, and a pay rate of $50-$60 per hour.