Senior GRC Analyst - Lead Risk, Compliance & Audit Programs

DataStaff, Inc.; Morrisville (NC); On-site; USD 90,000 - 120,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Paid time off

401k

Job summary

DataStaff Inc. is seeking an experienced Governance, Risk & Compliance (GRC) Analyst to lead cybersecurity governance, risk, and compliance initiatives across a complex technology environment for our client in Morrisville, NC.

The ideal candidate will strengthen risk management practices, control environments, and audit readiness while partnering with multiple stakeholders across Information Security, IT, Legal, Privacy, Procurement, and more.

Qualifications

• 5–8 years in cybersecurity GRC, risk management, or related fields.
• At least 2 years performing risk/control assessments, framework mapping, or audits.
• Ability to lead across multiple programs and stakeholder groups.
• Strong understanding of governance, risk, compliance practices and control frameworks.
• Familiarity with technical security controls in cloud, SaaS, API, and DevSecOps environments.
• Experience coordinating audits and reviewing evidence for completeness.

Responsibilities

• Lead cybersecurity risk assessments, maturity assessments, framework gap analyses, and control-mapping exercises.
• Coordinate audits, certification activities, customer security requests, evidence collection.
• Manage remediation from identification to resolution with tracking and follow-up.
• Develop and maintain security policies, standards, procedures, and governance templates.
• Support third‑party risk management including vendor due diligence and ongoing monitoring.
• Partner with stakeholders to evaluate control requirements and risk treatment strategies.
• Evaluate the design and operating effectiveness of security controls across environments.
• Develop dashboards and reports to provide visibility into risks and program performance.
• Advance GRC processes and increase audit readiness.
• Provide guidance and mentoring to junior team members.

Skills

GRC knowledge

Risk assessment

Audit coordination

Policy development

Stakeholder management

Communication

Control mapping

Problem solving

Education

Bachelor's degree in a related field

Job description

DataStaff Inc. is seeking an experienced Governance, Risk & Compliance (GRC) Analyst to lead cybersecurity governance, risk, and compliance initiatives across a complex technology environment for our client in Morrisville, NC.

The ideal candidate will strengthen risk management practices, control environments, and audit readiness while partnering with multiple stakeholders across Information Security, IT, Legal, Privacy, Procurement, and more.