Senior GRC Analyst — Remote, SOX & Compliance Leader

ZipStaff Inc.; Austin (TX); Remote; USD 83,000 - 131,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

401(k) with company match

Paid Time Off

Referral Program

Weekly direct deposit

Job summary

ZipStaff Inc. is seeking a Senior Governance, Risk & Compliance (GRC) Analyst for a remote U.S.-based contract role. The position focuses on supporting SOX ITGC programs, SOC 1/2, PCI DSS, NIST, and other regulatory requirements within complex enterprise environments.

The ideal candidate has 5+ years in GRC, strong contract review skills, and the ability to translate regulatory obligations into practical controls and documentation. This fully remote role is open to U.S.

Qualifications

• 5+ years in GRC, internal audit, or IT risk management.
• Experience reviewing legal, contractual, regulatory documentation and identifying requirements.
• Experience supporting SOX ITGC or comparable control programs, including walkthroughs and testing.
• Ability to interpret complex written requirements into actionable documentation.
• U.S. Citizenship or Green Card; remote work eligibility.

Responsibilities

• Support SOX ITGC program and related frameworks (SOC 1/2, PCI DSS, NIST, FTC, HITRUST, etc.).
• Develop, maintain, and implement GRC policies, standards, procedures, controls, and supporting documentation.
• Review contracts and regulatory documents to identify obligations and gaps.
• Coordinate with Legal, Compliance, Security, Technology, and Audit teams.
• Track findings and remediation through closure.

Skills

GRC expertise

Regulatory compliance

Contract review

Analytical skills

Written communication

Education

Bachelor's degree or equivalent experience

Tools

ServiceNow GRC/IRM

Archer

AuditBoard

OneTrust

Job description

ZipStaff Inc. is seeking a Senior Governance, Risk & Compliance (GRC) Analyst for a remote U.S.-based contract role. The position focuses on supporting SOX ITGC programs, SOC 1/2, PCI DSS, NIST, and other regulatory requirements within complex enterprise environments.

The ideal candidate has 5+ years in GRC, strong contract review skills, and the ability to translate regulatory obligations into practical controls and documentation. This fully remote role is open to U.S.