IT GRC Analyst: Risk, Compliance & Audit

Golden-1-Credit-Union; Manlove (CA); On-site; USD 93,000 - 120,000; Full time

Job summary

Golden 1 Credit Union is seeking an IT - Governance Risk and Compliance Gov Analyst to lead IT GRC reporting, assessments, and control monitoring within a financial services setting. This role requires coordination across IT and business teams to implement governance, risk, and compliance programs that align with regulatory expectations and industry standards.

The ideal candidate will apply expertise in frameworks such as NIST CSF, ISO 27001, PCI, SOX, HIPAA, GDPR, and GLBA, driving continuous

Qualifications

• Bachelor’s Degree in Business Administration, Accounting, MIS or CS preferred.
• Master’s Degree in Business Administration or related area preferred.
• 5+ years in cybersecurity as a practitioner with at least two to three years exposure to various security frameworks in a financial institution.
• Detailed understanding of risk management and controls assurance.
• Strong understanding of information security controls and standards such as ISO 27001/2, NIST CSF, and related frameworks.
• Thorough understanding of regulatory requirements such as PCI, SOX, HIPAA, HITRUST, GDPR and GLBA.
• Experience balancing business stakeholders with a central technology service organization.

Responsibilities

• Manage IT GRC reporting and assessments to meet defined requirements, policies, and regulations; perform gap analyses against frameworks.
• Coordinate and track IT audits with scope, timelines, evidence gathering, and remediation; maintain configuration documentation; advise on audit responses.
• Maintain oversight in a GRC platform.
• Produce metrics, reports, and dashboards; execute IT strategy for audits and assessments.
• Oversee IT system user access reviews with owner approvals and timely submissions.
• Identify strengths and weaknesses in the GRC program related to privacy, security, resiliency, and compliance.
• Support third-party risk assessments and remediation activities; report and respond to violations of rules and standards.
• Collaborate with auditors to keep audit focus and remediation delivery aligned; foster strong audit relationships.
• Facilitate Business Continuity/Disaster Recovery planning and testing exercises.
• Support GRC awareness training for stakeholders and provide on-site guidance to IT teams as needed.
• Maintain confidentiality of information processed, stored, or accessed by the system.
• Perform other duties as assigned.

Skills

Auditing coordination

Regulatory compliance

Stakeholder communication

GRC program oversight

Data analysis

Education

Bachelor’s Degree in Business Administration, Accounting, MIS or CS

Master’s Degree in Business Administration or related area

Tools

ISO 27001/2

NIST CSF

PCI

SOX

HIPAA

HITRUST

GDPR

Job description

Golden 1 Credit Union is seeking an IT - Governance Risk and Compliance Gov Analyst to lead IT GRC reporting, assessments, and control monitoring within a financial services setting. This role requires coordination across IT and business teams to implement governance, risk, and compliance programs that align with regulatory expectations and industry standards.

The ideal candidate will apply expertise in frameworks such as NIST CSF, ISO 27001, PCI, SOX, HIPAA, GDPR, and GLBA, driving continuous