Remote GRC Analyst: Build Practical Compliance Programs

Insight Security; Northern (KY); Hybrid; USD 68,000 - 95,000; Full time

Benefits offered by this job

Health, dental, and vision insurance

Fully remote work

Unlimited PTO

Home office stipend

401(k) with company match

Job summary

Insight Security is seeking a GRC Analyst to guide clients through compliance and risk programs from a fully remote location in the United States. You will assess frameworks like SOC 2, ISO 27001, and HIPAA, identify gaps, and help build practical programs that satisfy auditors without adding busywork.

You will collaborate with clients to tailor controls to their business, prepare for audits, respond to security questionnaires, and manage vendor risk while creating documentation that runs

Qualifications

• 2+ years of experience in GRC, compliance, or security program management.
• Familiarity with SOC 2, ISO 27001, NIST CSF, and HIPAA.
• Experience with audit preparation and working with external auditors.
• Strong writing skills and attention to detail.
• Ability to explain compliance requirements in plain language to non-security audiences.
• Comfort working with multiple clients and managing competing priorities.

Responsibilities

• Conduct gap assessments against SOC 2, ISO 27001, HIPAA, and other security frameworks.
• Help clients build and maintain policies, procedures, and control documentation.
• Prepare clients for audits and manage the audit process from start to finish.
• Respond to customer security questionnaires and RFPs.
• Assess third-party vendor risk and help clients build vendor management programs.
• Build and maintain risk registers and help clients prioritize remediation efforts.
• Create training materials and help clients build security awareness programs.
• Work with our consulting team to deliver client engagements on time and on budget.

Skills

GRC experience

Security frameworks

Audit preparation

Clear writing

Plain-language explanations

Vendor risk management

Tools

Vanta

Drata

Job description

Insight Security is seeking a GRC Analyst to guide clients through compliance and risk programs from a fully remote location in the United States. You will assess frameworks like SOC 2, ISO 27001, and HIPAA, identify gaps, and help build practical programs that satisfy auditors without adding busywork.

You will collaborate with clients to tailor controls to their business, prepare for audits, respond to security questionnaires, and manage vendor risk while creating documentation that runs