Remote GRC Analyst - Risk & Compliance Ops

Optiv Security Inc.; Overland Park (KS); Remote; USD 70,000 - 100,000; Full time

Job summary

Optiv Security Inc. is seeking a GRC Analyst to deliver governance, risk, and compliance support in a managed-services environment. The role is fully remote for candidates across the continental U.S.

and focuses on access reporting, account reconciliation, activity/audit-trail review, and evidence handling. You will work with control owners, risk owners, auditors, and service leadership, handling GRC and third‑party risk workflows, and ensuring timely, traceable execution while escalating issues

Qualifications

• 2+ years of GRC, audit support, access governance, or related control function.
• Experience with access governance, elevated-access reviews, and evidence quality.
• Familiarity with audit concepts: source evidence, findings, remediation.
• Ability to reconcile data across systems and maintain evidence.
• Proficiency with spreadsheets and reporting, plus workflow systems.

Responsibilities

• Generate access reports and reconcile non-user accounts.
• Review system activity logs and audit trails; document findings.
• Complete compliance forms and assist in audit reporting.
• Manage GRC and third-party risk workflow requests and tracking.
• Work within client systems and maintain secure evidence and records.
• Escalate exceptions and ensure timely, accurate deliverables.

Skills

Access governance

Elevated-access reviews

Inactive-account reconciliation

Evidence management

Audit support

Data reconciliation

Workflow administration

Stakeholder communication

Confidential information handling

Education

Bachelor’s degree in cybersecurity or related field

Security+, CISA, CRISC, CGRC (preferred)

Tools

Excel

Workflow systems

Document repositories

Audit reporting tools

Job description

Optiv Security Inc. is seeking a GRC Analyst to deliver governance, risk, and compliance support in a managed-services environment. The role is fully remote for candidates across the continental U.S.

and focuses on access reporting, account reconciliation, activity/audit-trail review, and evidence handling. You will work with control owners, risk owners, auditors, and service leadership, handling GRC and third‑party risk workflows, and ensuring timely, traceable execution while escalating issues