Senior GRC Analyst - Lead Audits & Compliance (Remote)

Hotman Group Llc; Fort Worth (TX); À distance; USD 110 000 - 140 000; Plein temps

Résumé du poste

Hotman Group is a boutique cybersecurity and GRC consulting firm seeking an experienced GRC Analyst to own client deliverables end-to-end. You will work directly with clients, design and mature programs, and drive risk assessments and remediation across multiple industries.

Ideal candidates bring hands-on GRC experience with SOC 2, ISO 27001, and NIST CSF, plus strong writing and communication skills. This is a fully remote role with contract-to-hire potential and growth into permanent positions

Qualifications

• Hands-on GRC experience with ownership of deliverables
• Deep knowledge of SOC 2, ISO 27001, NIST CSF, HIPAA, HITRUST
• Experience communicating findings to clients or senior stakeholders
• Excellent writing; deliverables are clear and polished
• Strong judgment and accountability; able to work remotely
• Ability to manage own workload and meet deadlines

Responsabilités

• Lead assessments and audits of security and IT controls
• Design, implement, and mature cybersecurity and compliance programs
• Develop risk registers, conduct risk assessments, track remediation
• Create and refine policies, standards, procedures aligned with frameworks
• Prepare clients for internal and external audits
• Translate requirements into actionable deliverables for stakeholders
• Communicate findings and manage client feedback
• Mentor junior analysts and participate in peer reviews

Connaissances

GRC delivery ownership

Clear client communication

Policy writing

Analytical thinking

Remote work discipline

Outils

SOC 2

ISO 27001

NIST CSF

HIPAA

HITRUST

CISA

CISM

CISSP

CRISC

Description du poste

Hotman Group is a boutique cybersecurity and GRC consulting firm seeking an experienced GRC Analyst to own client deliverables end-to-end. You will work directly with clients, design and mature programs, and drive risk assessments and remediation across multiple industries.

Ideal candidates bring hands-on GRC experience with SOC 2, ISO 27001, and NIST CSF, plus strong writing and communication skills. This is a fully remote role with contract-to-hire potential and growth into permanent positions