Remote GRC Analyst — SOC 2 & ISO 27001 Expert

Parallels; United States; Remote; USD 120,000 - 130,000; Full time

Benefits offered by this job

Fully remote

Job summary

Parallels is seeking a GRC Analyst to advance our governance, risk, and compliance program. The role focuses on third-party risk management, responding to RFPs and security questionnaires, and supporting SOC 2, ISO 27001, and DORA compliance across IT, Legal, Product, Security, and HR.

This fully remote US position offers flexibility and requires 4+ years in GRC or IT audit, a Bachelor’s in a related field, and strong written communication.

Qualifications

• Bachelor's degree in Information Security, Computer Science, Business, or related field.
• 4+ years of experience in GRC, IT audit, information security, or a related compliance role.
• Working knowledge of SOC 2, ISO 27001, and DORA requirements.
• Experience with risk register tools, Trust Centers, GRC platforms and ticketing systems.
• Excellent written communication for policy drafting and compliance reporting.
• Ability to work independently and manage multiple reviews and deadlines.

Responsibilities

• Monitor organizational compliance with internal policies and external regulations.
• Respond to customer RFPs and security/vendor questionnaires with timely, accurate responses.
• Support third-party risk management including vendor security assessments and due diligence.
• Maintain the organization's risk register and track remediation with risk owners.
• Help develop, review, and implement GRC policies and procedures.
• Lead audits and assessments against SOC 2, ISO 27001, and DORA requirements.

Skills

GRC

IT audit

Information security

Risk management

Vendor security

Policy drafting

Education

Bachelor's degree in Information Security, Computer Science, Business, or related field

Tools

GRC platforms

Trust Centers

Ticketing systems

Job description

Parallels is seeking a GRC Analyst to advance our governance, risk, and compliance program. The role focuses on third-party risk management, responding to RFPs and security questionnaires, and supporting SOC 2, ISO 27001, and DORA compliance across IT, Legal, Product, Security, and HR.

This fully remote US position offers flexibility and requires 4+ years in GRC or IT audit, a Bachelor’s in a related field, and strong written communication.