Senior Governance Risk & Compliance Analyst

Oliver James; Farmington Hills (MI); Hybrid; USD 89,544 - 96,432; Full time

Job summary

A prominent consulting firm located in Farmington Hills is seeking a Mid-Senior level Senior Governance Risk & Compliance Analyst. This hybrid position requires expertise in IT risk management, compliance with security standards, and active participation in audits and incident response. Ideal candidates will have 5+ years in information security and relevant certifications. Competitive hourly pay ranging from $65.00 to $70.00.

Qualifications

• Experience in vendor risk and governance.
• Familiarity with FedRAMP and AI governance.
• Strong knowledge of regulatory frameworks and security standards.

Responsibilities

• Identify, assess, and mitigate IT risks across the organization.
• Conduct risk assessments and coordinate audits.
• Support incident analysis and respond to security incidents.
• Ensure compliance with ISO 27001 and applicable regulations.
• Monitor effectiveness of security controls.

Skills

IT risk management

Security governance frameworks

Regulatory compliance

Incident response

Cross-functional collaboration

Education

5+ years in information security domains

Certifications: CRISK, CSA, CISSP

Job description

Senior Governance Risk & Compliance Analyst

Base pay range: $65.00/hr - $70.00/hr

Location: Farmington Hills, MI (Hybrid – 2 days onsite)

Duration: 6+ months

Employment type: Full-time

Seniority level: Mid-Senior level

Job function: Analyst

Industries: Information Services

Overview: Seeking an experienced GRC Analyst to support IT risk management and compliance initiatives. This role involves assessing risks, ensuring adherence to regulations, and maintaining security governance frameworks.

Key Responsibilities

• Identify, assess, and mitigate IT risks across the organization.
• Conduct risk assessments, update security policies, and coordinate audits.
• Respond to security incidents and support incident analysis.
• Ensure compliance with ISO 27001, NIST, CSF, CCSK, and applicable regulations.
• Collaborate with cross-functional teams and contribute to security requirements for new projects.
• Monitor effectiveness of security controls and stay current on evolving threats.

Preferred Experience & Skills

• 5+ years in information security domains (vendor risk, governance, operations).
• Familiarity with FedRAMP and AI governance.
• Strong knowledge of regulatory frameworks and security standards.
• Certifications preferred: CRISK, CSA, CISSP.