Junior GRC Specialist: Risk, Compliance & Audits

NY CREATES; City of Albany (NY); On-site; USD 75,000 - 95,000; Full time

Benefits offered by this job

Medical, Vision, and Dental

Competitive Pay and PTO

FSAs and DCAs

Life Insurance

Retirement health post‑retirement

Employer retirement contribution

Job summary

NY CREATES in Albany, NY is seeking a Junior Governance, Risk, and Compliance Specialist to support the GRC program. You will assist with risk assessments, vendor risk reviews, policy maintenance, and audits under senior GRC staff, building practical knowledge of NIST CSF, NIST 800-171, CMMC 2.0, and related ITAR/EAR requirements.

The position requires 2–3 years in a related field and a Bachelor’s degree in a cyber/IT or risk domain.

Qualifications

• Two to three years experience in governance, risk management, cybersecurity, compliance, IT, audit or related field.
• Bachelor's degree in a related field; equivalent experience may be considered.
• Foundational knowledge of information security, risk management, compliance, or audit principles.
• Familiarity with NIST CSF, 800-171, CMMC, CIS Controls, or ISO 9001.

Responsibilities

• Assist enterprise risk assessments by gathering information and maintaining risk register sections.
• Support third‑party risk management by coordinating questionnaires and vendor docs.
• Help maintain cybersecurity policies, standards, and procedures; track reviews.
• Support internal cybersecurity audits by organizing evidence and tracking findings.
• Coordinate information requests for compliance assessments under senior staff.
• Maintain GRC records, evidence repositories, and audit documentation with accuracy.
• Help with GRC reporting and dashboards by gathering data and metrics.
• Assist training efforts by maintaining records and coordinating communications.
• Assist with enterprise GRC tools workflows for risk, policy, vendor, audit.
• Collaborate with IT, legal, procurement and other owners to support compliance.

Skills

Risk assessment

Vendor risk management

Policy documentation

Information gathering

Written/verbal communication

Microsoft Office

Attention to detail

Education

Bachelor's degree in Cybersecurity/IT/ Risk Management/ Business Administration/ CS

Equivalent education and experience

Tools

GRC platform

Ticketing system

Document management system

Job description

NY CREATES in Albany, NY is seeking a Junior Governance, Risk, and Compliance Specialist to support the GRC program. You will assist with risk assessments, vendor risk reviews, policy maintenance, and audits under senior GRC staff, building practical knowledge of NIST CSF, NIST 800-171, CMMC 2.0, and related ITAR/EAR requirements.

The position requires 2–3 years in a related field and a Bachelor’s degree in a cyber/IT or risk domain.