Senior GRC Analyst – Remote Contract, Drive Compliance

LHH; United States; Remote; USD 83,000 - 103,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Life insurance

Short-term disability

401K plan

Job summary

LHH is seeking a Senior Governance, Risk & Compliance (GRC) Analyst for a fully remote contract engagement. You will lead and support GRC assessments across technology, applications, infrastructure, cloud/SaaS, business processes, and third parties.

You will assess IT and information security risk, evaluate control design and operating effectiveness, and coordinate remediation with stakeholders across IT, Finance, Legal, Privacy, and Internal Audit.

Qualifications

• 5+ years of experience in GRC, IT risk, information security assurance, IT audit, or a similar discipline.
• Hands-on experience with SOX, HIPAA, and PCI DSS.
• Strong understanding of risk assessment and risk management methodologies.
• Experience supporting internal and external audits with control owners.
• Bachelor's degree in IT, InfoSec, Accounting, Business, or related field.

Responsibilities

• Lead and support GRC assessments across technology, applications, infrastructure, cloud/SaaS environments, business processes, and third parties.
• Perform IT and information security risk assessments evaluating threats, vulnerabilities, business impact, inherent risk, residual risk, and risk treatments.
• Support compliance efforts involving SOX, HIPAA, and PCI DSS including scoping, evidence review, control testing, gap analysis, remediation, and audit readiness.
• Evaluate the design and operating effectiveness of IT and security controls, documenting exceptions and validating remediation.
• Coordinate IT general controls (ITGCs), access management, and change management activities.
• Develop risk reporting, assessment findings, metrics, and recommendations.

Skills

GRC

IT risk assessment

SOX

HIPAA

PCI DSS

IAM

ITGCs

Audit coordination

Stakeholder management

Policy development

Education

Bachelor's degree

Tools

AuditBoard

Diligent

Job description

LHH is seeking a Senior Governance, Risk & Compliance (GRC) Analyst for a fully remote contract engagement. You will lead and support GRC assessments across technology, applications, infrastructure, cloud/SaaS, business processes, and third parties.

You will assess IT and information security risk, evaluate control design and operating effectiveness, and coordinate remediation with stakeholders across IT, Finance, Legal, Privacy, and Internal Audit.