Senior IT GRC Analyst - Remote/Hybrid, Drive Controls

Relativity; Illinois; Hybrid; USD 90,000 - 136,000; Full time

Job summary

Relativity is seeking a Senior Governance, Risk, and Compliance (GRC) Analyst in the United States, with a focus on ITGC testing and second-line assurance within the IIA Three Lines Model. You will own control areas, maintain the Risk and Control Matrix, and produce audit-ready outputs, collaborating with engineering, product, and business teams.

You will work to translate complex technical requirements into business risk terms, support SOX/SOC 2 readiness, and leverage GRC tools to automate

Qualifications

• 4+ years IT audit, risk management or compliance experience.
• Experience with risk and control frameworks and translating requirements into controls.
• Experience maintaining Risk and Control Matrices (RCMs) and framework mappings.

Responsibilities

• Support second line of defense activities and maintain information security policies and standards.
• Identify risks with defensible analysis and provide remediation recommendations with owners and dates.
• Monitor control performance and drive deficiencies to closure; prepare quarterly risk reporting.

Skills

AICPA AT 101

COBIT

COSO Framework

FedRAMP

NIST CSF 2.0

NIST 800-53

ISO27001

SOC 2

ITGC

Internal Controls

Regulatory Compliance

Risk Management

Information Security

Job description

Relativity is seeking a Senior Governance, Risk, and Compliance (GRC) Analyst in the United States, with a focus on ITGC testing and second-line assurance within the IIA Three Lines Model. You will own control areas, maintain the Risk and Control Matrix, and produce audit-ready outputs, collaborating with engineering, product, and business teams.

You will work to translate complex technical requirements into business risk terms, support SOX/SOC 2 readiness, and leverage GRC tools to automate