Remote GRC Analyst: Compliance & Security Assurance

Kforce Inc; Chicago (IL); Remote; USD 70,000 - 110,000; Full time

Job summary

Kforce Inc. is seeking a Remote GRC Analyst to support governance, risk, and compliance activities across security, privacy, and regulatory programs.

You will gather audit evidence for SOC 2, HITRUST, HIPAA, and related frameworks while coordinating with internal teams to validate controls and document findings. The role emphasizes strong documentation, attention to detail, and the ability to manage multiple compliance initiatives in a fast-paced environment.

Qualifications

• 1-3 years of experience in GRC, audit, information security, or related fields.
• Working knowledge of SOC 2, HITRUST, or HIPAA.
• Strong written communication and documentation skills.
• Ability to manage multiple compliance activities and deadlines.

Responsibilities

• Support governance, risk, compliance, privacy, and security assurance activities.
• Gather, organize, and maintain audit evidence for SOC 2, HITRUST, HIPAA, and related requirements.
• Coordinate with internal teams to validate controls and obtain required documentation.
• Track compliance activities, control evidence, open items, and remediation through completion.
• Maintain security and privacy policies, including version control, acknowledgments, and supporting documentation.
• Conduct third-party/vendor risk assessments, document findings, and elevate identified risks.
• Assist with internal control testing and external audit preparation.
• Support privacy and data governance initiatives, including data retention, de-identification, and secure disposal requirements.
• Maintain accurate, audit-ready records demonstrating adherence to established security and compliance standards.

Skills

GRC/Compliance experience

SOC 2 knowledge

HITRUST knowledge

HIPAA knowledge

Written communication

Attention to detail

Organizational skills

Cross-functional collaboration

Vendor risk assessments

BAAs / external audits

Audit coordination

Documentation

Tools

GRC automation platforms

Job description

Kforce Inc. is seeking a Remote GRC Analyst to support governance, risk, and compliance activities across security, privacy, and regulatory programs.

You will gather audit evidence for SOC 2, HITRUST, HIPAA, and related frameworks while coordinating with internal teams to validate controls and document findings. The role emphasizes strong documentation, attention to detail, and the ability to manage multiple compliance initiatives in a fast-paced environment.