Senior Governance, Risk & Compliance Analyst

ZipStaff Inc.; Austin (TX); Remote; USD 83,000 - 131,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

401(k) with company match

Paid Time Off

Referral Program

Weekly direct deposit

Job summary

ZipStaff Inc. is seeking a Senior Governance, Risk & Compliance (GRC) Analyst for a remote U.S.-based contract role. The position focuses on supporting SOX ITGC programs, SOC 1/2, PCI DSS, NIST, and other regulatory requirements within complex enterprise environments.

The ideal candidate has 5+ years in GRC, strong contract review skills, and the ability to translate regulatory obligations into practical controls and documentation. This fully remote role is open to U.S.

Qualifications

• 5+ years in GRC, internal audit, or IT risk management.
• Experience reviewing legal, contractual, regulatory documentation and identifying requirements.
• Experience supporting SOX ITGC or comparable control programs, including walkthroughs and testing.
• Ability to interpret complex written requirements into actionable documentation.
• U.S. Citizenship or Green Card; remote work eligibility.

Responsibilities

• Support SOX ITGC program and related frameworks (SOC 1/2, PCI DSS, NIST, FTC, HITRUST, etc.).
• Develop, maintain, and implement GRC policies, standards, procedures, controls, and supporting documentation.
• Review contracts and regulatory documents to identify obligations and gaps.
• Coordinate with Legal, Compliance, Security, Technology, and Audit teams.
• Track findings and remediation through closure.

Skills

GRC expertise

Regulatory compliance

Contract review

Analytical skills

Written communication

Education

Bachelor's degree or equivalent experience

Tools

ServiceNow GRC/IRM

Archer

AuditBoard

OneTrust

Job description

Job Title: Senior Governance, Risk & Compliance Analyst.

Location: Remote (100% U.S.) - U.S. Citizen or Green Card holder only.

Employment Type: Contract (W2 through Randstad).

About the Opportunity:

ZipStaff is recruiting on behalf of our client for a hands-on Senior Governance, Risk, and Compliance (GRC) Analyst. The assignment is with a leading pharmaceutical company and focuses on supporting technology risk, regulatory compliance, audit activities, and control programs within complex enterprise environments.

You bring a combination of GRC expertise and legal or paralegal experience, enabling you to review and interpret contracts, regulatory requirements, legal documents, policies, compliance obligations, and audit materials. You can identify relevant requirements, flag potential compliance concerns, and partner with Legal, Privacy, Security, Technology, and business stakeholders when legal interpretation or escalation is required. This is a fully remote role open only to U.S. Citizens or Green Card holders.

What You'll Do:

• Support the execution and continuous improvement of the organization’s SOX ITGC program, with additional support for SOC 1, SOC 2, PCI DSS, NIST, FTC, HITRUST, CSI, DNU, and other applicable regulatory or compliance requirements.
• Support the development, review, maintenance, and implementation of GRC policies, standards, procedures, controls, and supporting documentation.
• Review legal, regulatory, contractual, and compliance documentation to identify obligations, control requirements, reporting requirements, deadlines, and potential compliance gaps.
• Translate relevant legal, contractual, and regulatory requirements into documented compliance requirements and control considerations in partnership with Legal and appropriate subject-matter experts.
• Partner with control owners to ensure assigned controls are appropriately documented, implemented, supported by evidence, and prepared for testing.
• Support Governance, Risk, and Control activities including MCA testing, Continuity of Business readiness, risk assessments, audit support, and remediation tracking.
• Identify opportunities to improve documentation quality, control consistency, and compliance processes.
• Partner with Technology, Security, Legal, Privacy, Internal Audit, external auditors, compliance teams, and business stakeholders.
• Act as a liaison for assigned audit, regulatory, legal, and compliance requests, helping coordinate documentation and responses across stakeholders.
• Provide practical guidance to control owners regarding SOX ITGC, SOC requirements, risk management practices, evidence expectations, and documentation standards.
• Review contracts, agreements, addenda, statements of work, regulatory correspondence, policies, procedures, control documentation, audit requests, and other legal or compliance-related materials for relevant GRC requirements.
• Identify and document obligations related to information security, privacy, regulatory compliance, audit rights, record retention, business continuity, third-party risk, breach or incident notification, and control requirements.
• Coordinate day-to-day compliance activities, including walkthroughs, control testing support, document reviews, evidence collection, and audit response management.
• Track findings, remediation plans, regulatory commitments, contractual obligations, and compliance actions through closure.
• Provide guidance to junior team members and control owners on GRC processes, evidence requirements, documentation practices, and audit readiness.

Required Qualifications:

• 5+ years of experience in Governance, Risk & Compliance, Internal Audit, IT Risk Management, Technology Compliance, regulatory compliance, legal operations, paralegal work, or a related field.
• Experience reviewing legal, contractual, regulatory, or compliance documentation and identifying relevant requirements, obligations, risks, or areas requiring escalation.
• Experience supporting SOX IT General Controls (ITGC) or comparable control programs, including walkthroughs, testing coordination, evidence review, remediation tracking, or auditor engagement.
• Working knowledge of one or more frameworks or regulatory areas such as SOX 302/404, SOC 1, SOC 2, PCI DSS, NIST, HITRUST, FTC requirements, COSO, or COBIT.
• Experience partnering with Legal, Compliance, Security, Technology, Internal Audit, external auditors, or business control owners.
• Ability to interpret complex written requirements and convert those requirements into organized, actionable documentation.
• Strong analytical, research, written communication, and document-management skills.
• Strong attention to detail, particularly when reviewing contractual, regulatory, audit, and control documentation.
• Ability to manage multiple concurrent assignments and deadlines in a complex enterprise environment.
• Ability to recognize matters requiring Legal, Privacy, Security, or other subject-matter-expert review and evade appropriately.
• Must be a U.S. Citizen or Green Card holder (no sponsorship).
• Ability to work fully remote.

Preferred Qualifications:

• Prior experience as a paralegal, senior paralegal, compliance analyst, legal operations analyst, regulatory analyst, or GRC analyst.
• Demonstrated experience reviewing contracts, regulatory documents, legal correspondence, policies, audit requests, or compliance obligations.
• Experience supporting contract or regulatory obligation management, including identifying requirements related to audit rights, security, privacy, record retention, incident notification, business continuity, or third-party risk.
• Experience mapping regulatory or contractual obligations to policies, standards, risks, controls, and evidence.
• Knowledge of SOX ITGC and SOC 1 / SOC 2 control environments.
• Familiarity with COSO, COBIT, NIST, and related governance and control frameworks.
• Experience operating within a first or second line of defense GRC function.
• Experience with enterprise GRC or audit platforms such as ServiceNow GRC/IRM, Archer, AuditBoard, or OneTrust.
• Experience researching regulatory requirements and supporting the implementation of corresponding policies or controls.
• Relevant certifications such as CISA, CRISC, CGRC, CIA, CISM, or paralegal certification.
• Bachelor's degree in Legal Studies, Paralegal Studies, Business Administration, Information Systems, Cybersecurity, Accounting, Finance, Risk Management, or a related discipline, or equivalent professional experience.
• Paralegal certificate or demonstrated professional legal-document-review experience preferred.

Benefits:

• Medical Insurance.
• Dental Insurance.
• Vision Insurance.
• 401(k) with company match.
• Paid Time Off.
• Referral Program.
• Weekly direct deposit.

About ZipStaff:

ZipStaff is recruiting on behalf of our client for this assignment. We focus on quality matches, clear communication, and long-term success for candidates and clients.