Remote GRC Analyst: SOC 2, GovRAMP & Compliance

Infotech; Lorida (FL); Remote; USD 80,000 - 120,000; Full time

Benefits offered by this job

Flexible time off

Remote within the US

Job summary

Infotech is seeking a GRC Analyst to lead day-to-day operations of SOC 2 Type II and GovRAMP programs, coordinating evidence collection, control documentation, and gap closure. You’ll partner with engineering, IT, and business teams to ensure compliance and readiness across audits.

The role supports GovRAMP assessments for APHS, drafts security policies, and administers Vanta/Drata to automate evidence collection, enabling efficient cross-team collaboration. Remote within the US is possible.

Qualifications

• 5+ years of experience in GRC, security compliance, or IT audit.
• Experience writing security policies and control documentation.
• Familiarity with policy as code and infrastructure-as-code policy checks.
• Experience supporting GovRAMP/StateRAMP/FedRAMP programs and POA&M management.

Responsibilities

• Run day-to-day work of SOC 2 Type II and GovRAMP programs.
• Coordinate evidence collection and control documentation with cross-functional teams.
• Close gaps and track remediation across audits and assessments.
• Administer compliance platforms to automate evidence collection and reporting.

Skills

GRC experience

Policy as code

Open Policy Agent

AWS Config rules

Automation scripting

Tools

Vanta

Drata

Job description

Infotech is seeking a GRC Analyst to lead day-to-day operations of SOC 2 Type II and GovRAMP programs, coordinating evidence collection, control documentation, and gap closure. You’ll partner with engineering, IT, and business teams to ensure compliance and readiness across audits.

The role supports GovRAMP assessments for APHS, drafts security policies, and administers Vanta/Drata to automate evidence collection, enabling efficient cross-team collaboration. Remote within the US is possible.