Remote InfoSec GRC Analyst

Dew Software, Inc.; Boston (MA); Hybrid; USD 90,000 - 120,000; Full time

Job summary

Dew Software, Inc. is seeking an Information Security Governance, Risk and Compliance Analyst to support the US affiliate’s GRC program.

You will perform risk assessments, manage compliance evidence, and coordinate remediation with IT, Legal, Procurement, and stakeholders in a cross-functional team. The role emphasizes policy administration, audit readiness, and ongoing improvement of risk management capabilities as the information security function matures.

Qualifications

• Minimum of 3 years in information security, cybersecurity governance, IT risk management, compliance, audit, or related disciplines.
• Strong written communication skills with the ability to develop clear documentation, reports, procedures and stakeholder-ready materials.
• Strong analytical and organizational skills with attention to detail and the ability to manage multiple priorities.

Responsibilities

• Perform information security risk assessments across applications, infrastructure, business processes, projects, and third parties.
• Support maintenance of the US information security risk register, risk treatment plans, remediation status, and supporting evidence.
• Execute third-party security reviews and vendor risk assessments in partnership with Procurement, Legal, Privacy, and business stakeholders.
• Support lifecycle management of information security policies, standards, procedures, guidelines, attestations, and exceptions.
• Collect, validate, and organize compliance and control evidence for internal audits, external audits, regulatory inspections, and assurance activities.
• Track remediation plans and coordinate follow-up activities with risk owners, control owners, and cross-functional stakeholders.
• Support control assessments and control effectiveness reviews against information security policies, standards, and regulatory requirements.
• Maintain governance, risk, and compliance documentation, repositories, metrics, dashboards, and reporting artifacts to support management visibility.
• Assist with preparation of executive reporting materials, governance committee content, and risk review documentation.
• Identify opportunities to improve GRC processes through standardization, automation, documentation quality, and repeatable workflows.

Skills

Information security

Governance

Risk management

Compliance

Audit

Analytical thinking

Education

Bachelor’s degree preferred

Job description

Dew Software, Inc. is seeking an Information Security Governance, Risk and Compliance Analyst to support the US affiliate’s GRC program.

You will perform risk assessments, manage compliance evidence, and coordinate remediation with IT, Legal, Procurement, and stakeholders in a cross-functional team. The role emphasizes policy administration, audit readiness, and ongoing improvement of risk management capabilities as the information security function matures.