Senior GRC Analyst

Request Technology, LLC; Chicago (IL); On-site; USD 105,000 - 145,000; Full time

Job summary

Request Technology, LLC is seeking an Information Security professional with a strong background in security frameworks and risk management to support client-facing security initiatives in a fast-paced environment.

The role focuses on leading risk assessments, maintaining security policies, and ensuring IT systems meet cybersecurity and compliance requirements across the organization.

Qualifications

• Bachelor’s degree in Information Security or related field.
• 4+ years of Information Security experience.
• Strong knowledge of ISO 27001, NIST, SOC, and SIG frameworks.
• Experience leading risk assessments, vendor security reviews, and client-facing security discussions.

Responsibilities

• Lead responses to client security assessments, questionnaires, and audits, documenting evidence and performing risk assessments as needed.
• Create, maintain, and evolve security policies, standards, guidelines, and support documentation through strong technical writing.
• Manage and support processes that ensure IT systems meet cybersecurity, risk, and compliance requirements.
• Serve as an Information Security subject matter expert, advising technical and non-technical stakeholders across the organization.
• Manage the third-party Security Vendor Risk Management program, including assessments, remediation tracking, and lifecycle oversight.
• Oversee the security exception request process and provide guidance on risk treatment decisions.
• Manage the full lifecycle of the Security Awareness program, including roadmap development, training evaluation, and effectiveness measurement.
• Support and optimize Governance, Risk, and Compliance (GRC) technology platforms and associated workflows.
• Conduct evaluations of IT programs and components to confirm alignment with published security standards and frameworks.

Skills

Information Security

Security frameworks

Risk assessments

Vendor security

Client-facing discussions

GRC platforms

RBAC

Security tools

Education

Bachelor’s degree

Tools

GRC platforms

Job description

*We are unable to provide sponsorship for this role*

Qualifications

• Bachelor’s degree and 4+ years of Information Security experience
• Strong working knowledge of security frameworks and standards such as ISO 27001, National Institute of Standards and Technology (NIST), System and Organization Controls (SOC), and Standardized Information Gathering (SIG)
• Experience leading risk assessments, vendor security reviews, and client-facing security discussions with professionalism and tact.
• Familiarity with GRC platforms, role-based access controls, and a broad range of security technologies and tools.
• Working knowledge of areas such as authentication, encryption, firewalls, SIEM, intrusion detection/prevention, vulnerability management, mobile security, and privileged access management.

Responsibilities

• Lead responses to client security assessments, questionnaires, and audits, documenting evidence and performing risk assessments as needed.
• Create, maintain, and evolve security policies, standards, guidelines, and support documentation through strong technical writing.
• Manage and support processes that ensure Information Technology (IT) systems meet cybersecurity, risk, and compliance requirements.
• Serve as an Information Security subject matter expert, advising technical and non-technical stakeholders across the organization.
• Manage the third-party Security Vendor Risk Management program, including assessments, remediation tracking, and lifecycle oversight.
• Oversee the security exception request process and provide guidance on appropriate risk treatment decisions.
• Manage the full lifecycle of the Security Awareness program, including roadmap development, training evaluation, and effectiveness measurement.
• Support and optimize Governance, Risk, and Compliance (GRC) technology platforms and associated workflows.
• Conduct evaluations of IT programs and components to confirm alignment with published security standards and frameworks.