Remote GRC Analyst: SOC 2 & GovRAMP Compliance Lead

Infotech; Tallahassee (FL); Remote; USD 100,000 - 150,000; Full time

Benefits offered by this job

Flexible time off

Paid holidays

Job summary

Infotech is seeking a GRC Analyst to manage the day-to-day work of SOC 2 Type II and GovRAMP programs, collaborating with engineering, IT, and business teams to collect evidence, document controls, and close gaps. This fully remote role within the US supports APHS and related projects with a focus on security policy development and continuous monitoring.

You will administer Vanta and automate evidence collection, perform risk and third-party assessments, and coordinate penetration tests while

Qualifications

• 5+ years in GRC, security compliance, or IT audit.
• Experience writing security policies and control documentation.
• Familiarity with policy as code and testing controls with policy engines.

Responsibilities

• Run day-to-day work of SOC 2 Type II and GovRAMP programs.
• Own SOC 2 Type II evidence collection and readiness for audits.
• Support GovRAMP assessments including evidence packages and continuous monitoring.

Skills

GRC Experience

Security policies

Policy as code

GovRAMP

Open Policy Agent

AWS security

Automation scripts

Tools

Vanta

Drata

Job description

Infotech is seeking a GRC Analyst to manage the day-to-day work of SOC 2 Type II and GovRAMP programs, collaborating with engineering, IT, and business teams to collect evidence, document controls, and close gaps. This fully remote role within the US supports APHS and related projects with a focus on security policy development and continuous monitoring.

You will administer Vanta and automate evidence collection, perform risk and third-party assessments, and coordinate penetration tests while