Remote GRC Analyst - SOC 2, ISO 27001, DORA

Calckey; Northern (KY); Hybrid; USD 120,000 - 130,000; Full time

Job summary

Parallels is seeking a GRC Analyst to support the ongoing maturity of our Governance, Risk, and Compliance program. The ideal candidate has experience with third-party risk management, RFP responses and security questionnaires, and is familiar with SOC 2, ISO 27001, and DORA.

This fully remote US role offers an annual salary of $120,000–$130,000. As a GRC Analyst, you will collaborate with IT, Legal, Product, Security, and HR, monitor compliance, manage the risk register, and support policy

Qualifications

• Bachelor's degree in Information Security, Computer Science, Business, or related field.
• 4+ years of experience in GRC, IT audit, information security, or related compliance role.
• Working knowledge of SOC 2, ISO 27001, and DORA requirements.
• Experience with risk register tools, Trust Centers, GRC platforms and ticketing systems.
• Excellent written communication skills for policy drafting and compliance reporting.
• Ability to work independently and manage multiple concurrent reviews and deadlines.

Responsibilities

• Monitor organizational compliance with internal policies and external regulations. Track control performance, identify gaps, and prepare regular compliance status reports for leadership.
• Respond to customer RFPs and security/vendor questionnaires, coordinating with subject matter experts to ensure accurate and timely responses. Maintain a library of standard responses and supporting evidence.
• Support the third-party risk management program, including vendor security assessments, due diligence reviews, and ongoing monitoring of vendor risk. Track vendor remediation items and maintain vendor risk documentation.
• Maintain and update the organization's risk register, ensuring all identified risks are documented, assessed, and monitored. Track risk treatment plans and follow up with risk owners on remediation status.
• Assist in the development, review, and implementation of GRC policies and procedures. Help ensure policies stay current with regulatory changes and organizational needs, and support employee awareness of policy requirements.
• Leads audits and assessments against SOC 2, ISO 27001, and DORA requirements. Assist in evidence collection, control testing, and remediation tracking for audit findings.

Skills

SOC 2

ISO 27001

DORA

Policy drafting

Written communication

Independent work

RFP responses

Third-party risk

Education

Bachelor's degree in Information Security, Computer Science, Business, or related field

4+ years of experience in GRC, IT audit, information security, or related compliance role

Tools

GRC platforms

Risk register tools

Trust Centers

Ticketing systems

Job description

Parallels is seeking a GRC Analyst to support the ongoing maturity of our Governance, Risk, and Compliance program. The ideal candidate has experience with third-party risk management, RFP responses and security questionnaires, and is familiar with SOC 2, ISO 27001, and DORA.

This fully remote US role offers an annual salary of $120,000–$130,000. As a GRC Analyst, you will collaborate with IT, Legal, Product, Security, and HR, monitor compliance, manage the risk register, and support policy