Hybrid vGRC Analyst: Governance, Risk & Compliance

Tevora; Irvine (CA); Hybrid; USD 95,000 - 105,000; Full time

Benefits offered by this job

Group Medical, Dental, Vision

Life Insurance

401k with Company match

PTO & Holidays

Vibrant work culture

Job summary

Tevora in Irvine, CA (hybrid with Fairfax, VA option) seeks an Analyst – vGRC to support GRC programs, audits, and policy development. You’ll work with clients to drive ITGC SOX audits and advise on information security best practices.

The role requires experience with ITGCs, risk assessments, and cross-functional collaboration. A Bachelor’s degree and 3+ years in security or compliance are expected, with a strong emphasis on client communication and independent problem solving.

Qualifications

• Direct experience with ITGCs of SOX in an audit role.
• Ability to communicate effectively across business and technical boundaries.
• Ability to work independently with minimal guidance and anticipate next steps.
• Bachelor’s Degree required; 3+ years in information security, IT, risk, or compliance.
• Experience with ISO 27001, SOC 2/SOC 1, SOX or PCI-DSS is a plus.

Responsibilities

• Support clients in Governance, Risk, and Compliance (GRC) programs and advisory work.
• Drive SOX audits as part of the GRC team, focusing on ITGCs.
• Coordinate and manage audits including control reviews, evidence collection, and audit work.
• Lead or support compliance and risk assessments, guiding junior staff.
• Conduct interviews to analyze security controls and identify recommendations.
• Execute multiple client engagements concurrently and communicate requirements clearly.
• Develop customized policies, procedures, and disaster recovery documentation for systems.
• Collaborate with cross-functional teams to provide InfoSec compliance support.

Skills

SOX ITGCs

Client communication

Auditing

Policy development

Risk assessment

Certifications

Education

Bachelor’s Degree from an accredited 4-year university

Job description

Tevora in Irvine, CA (hybrid with Fairfax, VA option) seeks an Analyst – vGRC to support GRC programs, audits, and policy development. You’ll work with clients to drive ITGC SOX audits and advise on information security best practices.

The role requires experience with ITGCs, risk assessments, and cross-functional collaboration. A Bachelor’s degree and 3+ years in security or compliance are expected, with a strong emphasis on client communication and independent problem solving.