Junior GRC Risk Analyst

Jobright.ai; Durham (NC); On-site; USD 60,000 - 80,000; Full time

Job summary

A leading IT security firm is looking for a Junior GRC Risk Analyst to conduct compliance assessments and manage regulatory risks. The candidate should hold a Bachelor's Degree and possess 1-3 years of experience in IT/security auditing. Knowledge of audit frameworks and policy writing is essential. You will collaborate with IT and security teams to ensure adherence to industry standards and propose improvements.

Qualifications

• 1-3 years in IT/security auditing, preferably in a software environment.
• Familiarity with frameworks like FedRAMP, ISO 27001, SOC2, NIST CSF, etc.
• Experience in writing audit findings, policies, and procedures.

Responsibilities

• Execute audits and risk assessments, communicate findings, and recommend improvements.
• Ensure management is aware of risks related to noncompliance with information security standards.
• Participate in security projects to implement new processes and risk treatments.

Skills

IT/security auditing

Analytical skills

Communication skills

Problem-solving skills

Knowledge of audit and risk concepts

Education

Bachelor's Degree in Computer Science or equivalent

Tools

Risk management software

Job description

Join to apply for the Junior GRC Risk Analyst role at Jobright.ai.

Jobright is an AI-powered career platform that helps job seekers discover top opportunities in the US. We are NOT a staffing agency. Jobright does not hire directly for these positions; we connect you with verified openings from trusted employers.

Job Summary:

Tanium is a leading provider of real-time cloud-based endpoint management and security solutions. The GRC Risk Analyst will conduct compliance assessments, develop policies, and manage risks, ensuring adherence to regulatory requirements and industry standards.

Responsibilities:

1. Execute audits and risk assessments, communicate findings, and recommend improvements through high-quality reports.
2. Ensure management is aware of risks related to noncompliance with information security standards and regulations.
3. Write and revise policies, standards, procedures, and guidelines based on business needs.
4. Participate in security projects to implement new processes and risk treatments.
5. Collaborate with security, IT, and system owners to review security questionnaires and due diligence requests.
6. Assist in assessing new vendors to ensure controls meet security and compliance requirements.
7. Prepare and present risk assessment reports to management.
8. Recommend changes to business processes or policies to mitigate risks.
9. Ensure compliance with relevant regulatory requirements.
10. Monitor risks and propose preventive measures.
11. Communicate risk status and initiatives with stakeholders.

Qualifications:

Required:

• Bachelor's Degree in Computer Science, Engineering, or equivalent experience.
• 1-3 years in IT/security auditing, preferably in a software environment.
• Knowledge of audit and risk concepts in IT/security.
• Familiarity with frameworks like FedRAMP, ISO 27001, SOC2, NIST CSF, etc.
• Experience in writing audit findings, policies, and procedures.
• Ability to conduct technical interviews and business process reviews.
• Knowledge of risk assessment, contingency planning, data analysis, and improvement tools.
• Experience with project management and change implementation.
• Strong analytical and problem-solving skills.
• Proficiency in risk management software.
• Excellent communication and presentation skills.

Company:

Tanium is an IT security firm providing risk management, incident response, EDR, and patch management services. Founded in 2007, headquartered in Kirkland, WA, with 1001-5000 employees. Currently in Late Stage.

Seniority level

• Entry level

Employment type

• Full-time

Job function

• Project Management

Industries

• Software Development

Referrals can increase your chances of interviewing at Jobright.ai by 2x.