Remote GRC Analyst: SOX, ISO 27001 & Compliance

Itron; New York (NY); Hybrid; USD 28,000 - 44,000; Full time

Benefits offered by this job

Accident and life insurance

Private outpatient care support

Cafeteria

iPhone with data allowance

Remote and flexibility

Job summary

Itron is seeking a GRC Analyst to support global cybersecurity governance and regulatory compliance programs across multiple countries. You will help with SOX, ISO 27001/27002 and SSAE-18, as well as NIS2 and related frameworks.

This role collaborates with Information Security, Internal Audit, Legal, Compliance, IT Operations and business teams to assess control effectiveness, track remediation, and provide clear compliance reporting to management.

Qualifications

• Bachelor’s degree in Cybersecurity, Business Administration or related field.
• At least 1 year in information security governance, compliance, audit or risk management.
• Knowledge of SOX, ISO 27001/27002, SSAE-18, NIS2, SOCI or Cyber Essentials.
• Experience supporting audits, control testing, policy reviews, or evidence collection.
• Strong analytical, organizational and written communication skills.

Responsibilities

• Assist governance activities across multiple frameworks and countries.
• Interpret regulations and translate obligations into security controls.
• Conduct compliance gap assessments and maintain remediation plans.
• Maintain regulatory obligation registers, trackers and evidence repositories.
• Monitor regulatory developments affecting governance obligations.
• Support audits related to SOX, SSAE-18, ISO, NIS2, SOCI, and Cyber Essentials.
• Track audit findings and management action plans through remediation.
• Collaborate with information security and business leaders to meet objectives.
• Provide guidance to stakeholders on governance and regulatory obligations.

Skills

Governance and compliance

Audit support

Documentation

Cross-functional collaboration

Analytical skills

Education

Bachelor’s degree in Cybersecurity or related field

Tools

Auditboard/Optro

Archer

ServiceNow GRC

Job description

Itron is seeking a GRC Analyst to support global cybersecurity governance and regulatory compliance programs across multiple countries. You will help with SOX, ISO 27001/27002 and SSAE-18, as well as NIS2 and related frameworks.

This role collaborates with Information Security, Internal Audit, Legal, Compliance, IT Operations and business teams to assess control effectiveness, track remediation, and provide clear compliance reporting to management.