Senior GRC & InfoSec Risk Analyst (Remote)

Golden Technology; North Carolina; Hybrid; USD 120,000 - 160,000; Full time

Job summary

Golden Technology is seeking a Senior Information Security GRC Analyst to lead risk assessments, support regulatory and customer assurance efforts, and maintain risk and compliance documentation. You will partner with business, privacy, legal, and audit teams to ensure risks are identified, documented, and managed in alignment with policy and risk appetite.

Responsibilities include maintaining risk registers, coordinating audits, developing governance materials, and delivering dashboards that

Qualifications

• Bachelor’s degree in a relevant field or equivalent experience.
• 5+ years in information security, risk management, or related GRC role.
• Experience with ISO/IEC 27001, NIST, COBIT, ITIL, or similar frameworks.
• Strong written and verbal communication and stakeholder engagement.

Responsibilities

• Lead and perform information security risk assessments for applications, infra, and processes.
• Maintain risk registers, issue logs, control gap trackers, audit findings, evidence repositories, policy exception records, and remediation plans.
• Support the development, review, maintenance, and communication of information security policies, standards, procedures, control documentation, and supporting governance materials.
• Coordinate internal audits, external audits, regulatory reviews, customer security assessments, RFIs, due diligence questionnaires, and evidence requests by gathering documentation, validating responses, and tracking corrective actions.
• Support compliance with applicable frameworks, standards, legal, regulatory, contractual, and customer requirements, including ISO/IEC 27001, NIST, COBIT, ITIL, ISO 31000, GDPR, and other applicable cybersecurity and privacy obligations.
• Partner with application, infrastructure, security operations, privacy, legal, quality, procurement, internal audit, and business stakeholders to ensure security requirements are understood, implemented, and monitored.
• Support third-party and supplier risk management activities, including security due diligence, questionnaire reviews, contract security input, risk documentation, remediation follow-up, and exception management.
• Track remediation activities for security risks, audit findings, vulnerability findings, penetration testing results, control gaps, and compliance issues; follow up with owners and escalate overdue or high-risk items as appropriate.
• Develop dashboards, metrics, management reports, and status updates that communicate risk posture, control effectiveness, audit readiness, compliance obligations, remediation progress, and emerging issues.
• Support disaster recovery, business continuity, crisis management, and operational resilience activities through documentation, testing support, tabletop exercises, lessons learned, and improvement tracking.
• Provide senior-level guidance to stakeholders on security risk management, control expectations, policy compliance, evidence requirements, and risk treatment decisions.
• Monitor changes in information security laws, regulations, frameworks, threats, and industry best practices; recommend updates to policies, controls, procedures, and reporting practices as needed.
• Support continuous improvement of GRC processes, including automation, workflow optimization, evidence management, reporting enhancements, and adoption of GRC or Integrated Risk Management tooling.
• Promote a strong security and compliance culture through stakeholder engagement, awareness support, clear communication, and practical guidance.
• Maintain confidentiality of company, customer, employee, and supplier information and comply with all Information Security standards, procedures, and ethical requirements.

Skills

Risk assessments

Policy governance

Audit readiness

Stakeholder engagement

Education

Bachelor’s degree in Information Security

Tools

GRC tooling

Audit management software

Job description

Golden Technology is seeking a Senior Information Security GRC Analyst to lead risk assessments, support regulatory and customer assurance efforts, and maintain risk and compliance documentation. You will partner with business, privacy, legal, and audit teams to ensure risks are identified, documented, and managed in alignment with policy and risk appetite.

Responsibilities include maintaining risk registers, coordinating audits, developing governance materials, and delivering dashboards that