Senior GRC Analyst - Remote, Client-Facing & Impactful

Hotman Group; Fort Worth (TX); Remote; USD 110,000 - 150,000; Full time

Job summary

Hotman Group is a boutique cybersecurity and GRC consulting firm seeking an experienced GRC practitioner. You will own deliverables end to end, work directly with clients, and mentor junior analysts in a fully remote setting.

This role is full-time, contract-to-hire, with top performers moving into permanent roles within 6 months. Expect active delivery across SOC 2, ISO 27001, NIST CSF, HIPAA, HITRUST and related standards.

Qualifications

• Hands-on GRC experience with delivering end-to-end projects.
• Deep knowledge of SOC 2, ISO 27001, NIST CSF, HIPAA, HITRUST.
• Ability to present findings to clients and senior stakeholders.

Responsibilities

• Lead assessments and audits of security and IT control environments.
• Design, implement, and mature cybersecurity and compliance programs.
• Develop risk registers and track remediation efforts.
• Create and refine policies, standards, and procedures aligned with top frameworks.
• Prepare clients for internal audits and external assessments.
• Translate complex requirements into actionable deliverables for clients.

Skills

GRC experience

Compliance standards

Client communication

Writing skills

Critical thinking

Accountability

Remote work

Team mentorship

Education

CISA

CISM

CISSP

CRISC

Job description

Hotman Group is a boutique cybersecurity and GRC consulting firm seeking an experienced GRC practitioner. You will own deliverables end to end, work directly with clients, and mentor junior analysts in a fully remote setting.

This role is full-time, contract-to-hire, with top performers moving into permanent roles within 6 months. Expect active delivery across SOC 2, ISO 27001, NIST CSF, HIPAA, HITRUST and related standards.