Remote GRC Analyst — Privacy, Risk & Compliance

RMI; United States; Remote; USD 77,000 - 95,000; Full time

Benefits offered by this job

Medical, dental, vision insurance

403b retirement match

Paid time off & parental leave

Remote/Hybrid work options

Home office stipend

Learning & development budget

Job summary

RMI is seeking a Governance, Risk & Compliance professional to help align technology, contracts, and business processes with regulatory requirements. You will collaborate with Legal, IT, People Team, and Procurement to mature privacy and governance programs.

This remote-ready role supports governance, risk, privacy, and compliance across initiatives such as GDPR and regional privacy laws, with a focus on vendor management and audits. Travel may be required.

Qualifications

• Bachelor's degree or equivalent in governance, compliance, risk, privacy, information security, or related field.
• 3–5 years of governance, compliance, risk, privacy, procurement, internal audit or information security experience.
• Experience supporting compliance audits, vendor risk assessments, or regulatory programs.

Responsibilities

• Maintain governance policies, standards, and procedures for technology and privacy.
• Review contracts for security, privacy, and compliance obligations with Legal/Procurement.
• Coordinate compliance initiatives (Colorado Privacy Act, GDPR/UK GDPR) and remediation.
• Perform risk assessments for new technologies and vendors; maintain risk register.

Skills

Privacy & Data Protection

Risk & Vendor Management

Audit & Compliance Monitoring

Policy & Documentation Management

Analytical Problem-Solving

Cross-Functional Communication

Education

Bachelor's degree or equivalent experience in governance, compliance, risk, privacy, information security, or related field

Tools

DPAs & Security Questionnaires

Job description

RMI is seeking a Governance, Risk & Compliance professional to help align technology, contracts, and business processes with regulatory requirements. You will collaborate with Legal, IT, People Team, and Procurement to mature privacy and governance programs.

This remote-ready role supports governance, risk, privacy, and compliance across initiatives such as GDPR and regional privacy laws, with a focus on vendor management and audits. Travel may be required.