Senior IT GRC Analyst — Risk & Controls

Relativity; Chicago (IL); Hybrid; USD 90,000 - 136,000; Full time

Job summary

Relativity in Chicago, IL is seeking a Senior Governance, Risk, and Compliance (GRC) Analyst to strengthen the second line of defense for IT controls under recognized frameworks. You will own ITGC testing, maintain RCM entries, and guide cross-functional teams on control implementation, with oversight from GRC leadership.

You will evaluate risk, translate technical detail into business terms, and contribute to audit readiness for SOX, ISO 27001, SOC 2, and FedRAMP programs while continuously

Qualifications

• 4+ years of IT audit, risk management or compliance experience.
• Hands-on ITGC testing and control design knowledge.
• Experience with multiple frameworks: NIST, ISO/IEC 27001, SOC 2, COSO.
• Ability to communicate testing results to technical and non-technical audiences.

Responsibilities

• Lead second line of defense testing and risk analysis.
• Maintain and update GRC artifacts, mappings, and risk registers.
• Translate technical controls into business risk language for stakeholders.

Skills

AICPA AT 101

Business Process

COBIT

COSO

FedRAMP

Financial Services

Information Security

ITGC

Internal Controls

ISO27001

NIST 800-53

Process Improvements

Regulatory Compliance

Risk Management

Risk Compliance

Job description

Relativity in Chicago, IL is seeking a Senior Governance, Risk, and Compliance (GRC) Analyst to strengthen the second line of defense for IT controls under recognized frameworks. You will own ITGC testing, maintain RCM entries, and guide cross-functional teams on control implementation, with oversight from GRC leadership.

You will evaluate risk, translate technical detail into business terms, and contribute to audit readiness for SOX, ISO 27001, SOC 2, and FedRAMP programs while continuously