Remote GRC Analyst — SOC 2 & GovRAMP | Flexible PTO

Infotech; Florida; Remote; USD 90,000 - 120,000; Full time

Benefits offered by this job

Flexible work-life support

Fully remote within the US

Job summary

Infotech, headquartered in Gainesville, Florida, seeks a GRC Analyst to drive SOC 2 Type II and GovRAMP programs, collecting evidence, documenting controls, and closing gaps. You will own evidence collection and readiness, administering Vanta and coordinating with engineering, IT, and business teams to ensure compliance across platforms.

The role offers fully remote work within the US, with up to 10% travel and occasional after-hours duties during audit periods.

Qualifications

• 5+ years of experience in GRC, security compliance, or IT audit.
• Experience writing security policies and control documentation.
• Familiarity with policy as code, such as Open Policy Agent, AWS Config rules, or IaC policy checks.
• Experience supporting GovRAMP, StateRAMP, or FedRAMP programs, including POA&Ms or continuous monitoring.
• Good understanding of cloud security policies.
• Experience with government or contract-driven customers.
• Administration of Vanta, Drata, or similar compliance platform.
• Ability to read AWS configuration evidence and know what good looks like.
• Experience automating compliance work with scripts or APIs.
• Travel up to 10% and occasional after-hours work during audits.

Responsibilities

• Run day-to-day work of SOC 2 Type II and GovRAMP programs.
• Collect evidence and document controls across engineering, IT, and business teams.
• Close gaps identified during audits.
• Own SOC 2 Type II evidence collection and readiness for each audit cycle.
• Administer Vanta and automate evidence collection to reduce manual work.
• Perform risk and third-party assessments.
• Verify that AWS controls operate as documented.
• Coordinate penetration tests and track findings to closure.
• Manage customer security questionnaire process.

Skills

GRC experience

Policy writing

Policy as code

GovRAMP knowledge

Cloud security

Audits/assessments

Automation scripting

Stakeholder communication

Open Policy Agent

Education

Bachelor's degree

Tools

Vanta

Drata

AWS Config

Job description

Infotech, headquartered in Gainesville, Florida, seeks a GRC Analyst to drive SOC 2 Type II and GovRAMP programs, collecting evidence, documenting controls, and closing gaps. You will own evidence collection and readiness, administering Vanta and coordinating with engineering, IT, and business teams to ensure compliance across platforms.

The role offers fully remote work within the US, with up to 10% travel and occasional after-hours duties during audit periods.