Senior InfoSec GRC Analyst - Risk & Compliance

otsi-global; Cary (NC); On-site; USD 110,000 - 140,000; Full time

Job summary

Object Technology Solutions, Inc (OTSI) is seeking a Sr. Information Security Analyst - GRC to lead governance, risk and compliance initiatives in a Cary, NC onsite role.

Responsibilities include contract risk management, regulatory compliance, audit support, and policy development to align with legal and contractual requirements. The ideal candidate brings 7–10 years of GRC experience, familiarity with NIST CSF and ISO 27001, and the ability to collaborate across IT teams to drive measurable

Qualifications

• Bachelor’s degree required in information systems or related field.
• 7–10 years of experience in GRC executing or auditing against standards and regulations.
• Experience supporting GRC functions for global companies.
• Familiarity with risk assessment methodologies and frameworks.
• Ability to align internal policy, process, control design and cyber risk with regulatory standards.

Responsibilities

• Contract Risk Management: review client contracts for data security and breach provisions.
• Regulatory Compliance Risk Management: support audits and collect evidence of security policies and operations.
• Request/review documentation from control owners to certify compliance to standards.
• Monitor global regulatory landscape and update compliance requirements.
• IT Governance: help develop policy aligned with regulatory, legal, and contractual needs.
• Assist with standards documentation for architecture and operations teams.
• Contribute to governance forums and cross-functional committees.
• Cyber Risk Management: establish and improve metrics to measure risk management effectiveness.

Skills

GRC

Regulatory compliance

Contract risk

Risk assessment

Policy alignment

Collaboration

NIST CSF

ISO 27001

SOC

Education

Bachelor’s degree in information systems or related field

Tools

ServiceNow

Job description

Object Technology Solutions, Inc (OTSI) is seeking a Sr. Information Security Analyst - GRC to lead governance, risk and compliance initiatives in a Cary, NC onsite role.

Responsibilities include contract risk management, regulatory compliance, audit support, and policy development to align with legal and contractual requirements. The ideal candidate brings 7–10 years of GRC experience, familiarity with NIST CSF and ISO 27001, and the ability to collaborate across IT teams to drive measurable