Remote GRC Analyst: SOC 2 + ISO 27001, Flexible Hours

ADP, Inc.; United States; Remote; USD 120,000 - 130,000; Full time

Job summary

Parallels is seeking a GRC Analyst to advance our Governance, Risk, and Compliance program in a fully remote US role. You’ll drive third-party risk management, respond to RFPs and security questionnaires, and support audits against SOC 2, ISO 27001, and DORA.

Collaborative work across IT, Legal, Product, Security, and HR is key to success. With 4+ years in GRC or related fields, you’ll maintain risk documentation, track controls, and help keep policies current with regulatory changes.

Qualifications

• Bachelor's degree in Information Security, Computer Science, Business, or related field (or equivalent experience).
• 4+ years of experience in GRC, IT audit, information security, or a related compliance role.
• Working knowledge of SOC 2, ISO 27001, and DORA requirements.
• Experience with risk register tools, Trust Centers, GRC platforms and ticketing systems.
• Excellent written communication skills for policy drafting and compliance reporting.

Responsibilities

• Monitor organizational compliance with internal policies and external regulations. Track control performance, identify gaps, and prepare regular compliance status reports for leadership.
• Respond to customer RFPs and security/vendor questionnaires, coordinating with subject matter experts to ensure accurate and timely responses. Maintain a library of standard responses and supporting evidence.
• Support the third-party risk management program, including vendor security assessments, due diligence reviews, and ongoing monitoring of vendor risk. Track vendor remediation items and maintain vendor risk documentation.
• Maintain and update the organization's risk register, ensuring all identified risks are documented, assessed, and monitored. Track risk treatment plans and follow up with risk owners on remediation status.
• Assist in the development, review, and implementation of GRC policies and procedures. Help ensure policies stay current with regulatory changes and organizational needs, and support employee awareness of policy requirements.
• Leads audits and assessments against SOC 2, ISO 27001, and DORA requirements. Assist in evidence collection, control testing, and remediation tracking for audit findings.

Skills

GRC

Risk management

Policy drafting

Technical writing

Independent work

Education

Bachelor's degree in Information Security, Computer Science, Business, or related field

Tools

GRC platforms

risk register tools

Trust Centers

ticketing systems

Job description

Parallels is seeking a GRC Analyst to advance our Governance, Risk, and Compliance program in a fully remote US role. You’ll drive third-party risk management, respond to RFPs and security questionnaires, and support audits against SOC 2, ISO 27001, and DORA.

Collaborative work across IT, Legal, Product, Security, and HR is key to success. With 4+ years in GRC or related fields, you’ll maintain risk documentation, track controls, and help keep policies current with regulatory changes.