Remote Junior GRC Analyst: Security & Compliance

Jobvite, Inc.; Seattle (WA); Remote; USD 94,000 - 104,000; Full time

Job summary

Davis Wright Tremaine LLP is seeking a Junior Governance, Risk & Compliance (GRC) Analyst to join our Security Office remotely within reasonable commuting distance of our offices. The role supports audits, vendor security reviews, and regulatory readiness across ISO 27001, NIST CSF, and SOC 2 frameworks.

You will help maintain the ISMS, coordinate client inquiries, and assist with audit preparedness and policy administration while working under senior Security Office personnel.

Qualifications

• 2 years of experience in cybersecurity, compliance, audit, risk management, legal operations, governance, or related fields.
• Bachelor's Degree in Cybersecurity, Information Systems, Business Administration, Risk Management, Legal Studies, or related field preferred
• Equivalent combination of education and experience may be considered
• Strong written communication and documentation skills
• Proficiency using Microsoft 365 applications
• Ability to manage sensitive and confidential information
• Strong organizational and analytical skills
• Ability to manage multiple concurrent projects and deadlines
• Exposure to cybersecurity governance or compliance activities
• Understanding of common security frameworks (ISO 27001, NIST CSF, SOC 2)
• Experience reviewing contracts, questionnaires, audit requests, or vendor documentation
• Familiarity with professional services, legal, or highly regulated environments
• Experience using AI-assisted research and document analysis tools

Responsibilities

• Assist with client security audits and assessments.
• Gather, organize, and maintain audit evidence packages.
• Coordinate collection of supporting documentation from multiple business units.
• Draft responses to customer security questionnaires utilizing approved evidence repositories.
• Track audit deliverables, deadlines, and open requests.
• Maintain client audit documentation and records.
• Support continuous improvement of audit response processes.
• Review client Outside Counsel Guidelines for cybersecurity, privacy, AI governance, incident response, and compliance requirements.
• Document identified security requirements and contractual obligations.
• Track OCG-derived security requirements and remediation activities.
• Support preparation of Security Office recommendations and exception documentation.
• Maintain OCG tracking databases and reporting artifacts.
• Support vendor cybersecurity reviews and due diligence activities.
• Review vendor security questionnaires, SIG responses, SOC reports, certifications, attestations, and supporting evidence.
• Assist in documenting security findings, risks, recommendations, and compensating controls.
• Track vendor remediation activities and review cycles.
• Maintain vendor assessment records and documentation libraries.
• Support periodic vendor reevaluations and monitoring activities.
• Support ISO 27001, internal audit, client audit, and regulatory readiness activities.
• Assist with evidence management and document control.
• Verify security policies, standards, procedures, and records remain current.
• Participate in audit preparation exercises and gap assessments.
• Track corrective actions and audit observations.
• Maintain governance documentation repositories.
• Assist with security policy review activities.
• Monitor compliance tracking programs.
• Support security metrics development and reporting.
• Assist with risk register and remediation tracking activities.
• Contribute to process improvement and automation initiatives.
• Update SOPs, standards, procedures, and knowledge base content.
• Maintain audit, OCG, and vendor review records.
• Ensure documentation remains organized, current, and accessible.
• Coordinate with Procurement, Information Governance, Legal, and Security Operations stakeholders.

Skills

Cybersecurity

Compliance

Audit

Risk management

Governance

Legal operations

Education

Bachelor's degree

Job description

Davis Wright Tremaine LLP is seeking a Junior Governance, Risk & Compliance (GRC) Analyst to join our Security Office remotely within reasonable commuting distance of our offices. The role supports audits, vendor security reviews, and regulatory readiness across ISO 27001, NIST CSF, and SOC 2 frameworks.

You will help maintain the ISMS, coordinate client inquiries, and assist with audit preparedness and policy administration while working under senior Security Office personnel.