Remote IT Risk & Compliance Analyst: Shape the GRC Program

Not Specified; United States; Remote; USD 60,000 - 90,000; Full time

Job summary

Not Specified is seeking an experienced compliance professional to support a growing IT risk, privacy, and governance program in a remote US-based role. You will collaborate with Legal, IT, Delivery, and leadership to translate requirements into controls and measurable safeguards.

You will review client agreements and security questionnaires, manage evidence for vendors, and help shape a program from the ground up, embracing a small, collaborative team that values diverse perspectives.

Qualifications

• 3–5 years of experience in compliance, GRC, contract management, or privacy.
• Knowledge of SOC 2, ISO 27001, or NIST CSF.
• Remote work within the United States.
• Opportunity to help shape a program from the ground up.

Responsibilities

• Review client agreements and security questionnaires.
• Manage control evidence and vendor risk.
• Support privacy, data retention, and compliance policies.

Skills

GRC

Contract management

Privacy

SOC 2

ISO 27001

NIST CSF

Job description

Not Specified is seeking an experienced compliance professional to support a growing IT risk, privacy, and governance program in a remote US-based role. You will collaborate with Legal, IT, Delivery, and leadership to translate requirements into controls and measurable safeguards.

You will review client agreements and security questionnaires, manage evidence for vendors, and help shape a program from the ground up, embracing a small, collaborative team that values diverse perspectives.