Senior GRC & Information Security Analyst

Cloudhq; Ashburn (VA); On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

Medical, dental, vision

Life insurance

Disability insurance

401(k) with match

Paid holidays

Generous PTO

Development opportunities

Job summary

CloudHQ is seeking a Senior Information Security & Compliance Analyst to support governance, risk, and compliance programs across ISO 27001:2022, SOC 1/2, ISO 14001, and ISO 50001. You will collaborate with process owners to strengthen controls and documentation.

This role requires independent execution of audits, evidence management, remediation tracking, and reporting to management, with a focus on continual ISMS improvement and audit readiness.

Qualifications

• 5+ years in GRC, cybersecurity compliance, IT audit, or risk management.
• Hands-on experience with ISO 27001, SOC 1/2, and related frameworks.
• Experience using multiple GRC platforms as listed.
• Experience conducting internal audits, control and risk assessments, remediation.
• Ability to translate requirements into practical controls and documentation.

Responsibilities

• Perform GRC, audit, risk, control, and compliance activities independently.
• Maintain ISMS and support continual improvement.
• Support ISO 27001:2022, SOC 1, SOC 2, and other frameworks.
• Support ISO 14001 and ISO 50001 program activities as applicable.
• Conduct internal audits, risk assessments, control assessments, gap assessments, and reviews.
• Support audits, certifications, attestations, evidence collection and remediation tracking.
• Work with owners to evaluate controls, identify gaps, and develop remediation actions.
• Track findings, non-conformities, risks, and remediation through closure.
• Maintain GRC platforms, risk registers, control libraries, and reporting.
• Develop, review, and maintain policies, standards, and documentation.
• Provide guidance to business and technical teams on GRC.
• Monitor compliance requirements and update controls and documentation.
• Prepare status information for management reporting.
• Support security and compliance awareness and training initiatives.
• Identify opportunities to standardize GRC processes and reporting.

Skills

GRC governance

ISO 27001

SOC 1/2

Audit

Risk assessment

Evidence management

GRC platforms

Communication

Education

Bachelor’s degree

Tools

OneTrust

Hyperproof

RSA Archer

ServiceNow GRC

AuditBoard

LogicGate

Job description

CloudHQ is seeking a Senior Information Security & Compliance Analyst to support governance, risk, and compliance programs across ISO 27001:2022, SOC 1/2, ISO 14001, and ISO 50001. You will collaborate with process owners to strengthen controls and documentation.

This role requires independent execution of audits, evidence management, remediation tracking, and reporting to management, with a focus on continual ISMS improvement and audit readiness.