Senior IT GRC & Compliance Analyst

Bennett Thrasher; Atlanta (GA); Presencial; USD 85 000 - 120 000; Tempo integral

Resumo da oferta

Bennett Thrasher seeks an IT Governance, Risk & Compliance (GRC) Analyst to support our technology compliance, risk, and data-governance programs in Atlanta. This hands-on role maintains SOC 2 readiness, coordinates IT controls, and supports data retention initiatives.

The ideal candidate has experience in IT audit or cybersecurity compliance and is eager to develop their expertise while partnering with multiple teams to strengthen our security posture.

Qualificações

• 4+ years of experience in IT GRC, IT audit, cybersecurity compliance, technology risk, SOC/SOX controls, or information security.
• Understanding of IT controls, audit evidence, and risk-management concepts.
• Experience with Microsoft 365 or similar enterprise technology environments.
• Strong organization, documentation, communication, and follow-through skills.

Responsabilidades

• Maintain the SOC 2 control calendar and coordinate recurring control activities.
• Collect, review, and maintain audit evidence and documentation.
• Track control gaps, exceptions, remediation plans, and outstanding items.
• Coordinate SOC 2 readiness activities and external auditor requests.
• Perform and document recurring user and privileged-access reviews.
• Support Microsoft Purview, including data classification, DLP, sensitivity labeling, and retention.
• Assist with development and implementation of the firm’s data-retention program.
• Administer security awareness campaigns, phishing simulations, and reporting.
• Maintain IT compliance and security policies and coordinate periodic reviews.
• Review change requests for compliance, risk, data protection, and audit requirements, ensuring proper approvals and documentation.
• Assist with technology risk assessments, vendor security reviews, and client security questionnaires.
• Maintain risk and remediation registers and follow up with control owners.
• Prepare compliance reporting for IT leadership.
• Identify opportunities to automate compliance monitoring and evidence collection.
• Escalate significant control failures, risks, and policy exceptions.
• Review change requests for compliance, risk, data protection, and audit requirements, ensuring proper approvals and documentation.

Descrição da oferta de emprego

Bennett Thrasher seeks an IT Governance, Risk & Compliance (GRC) Analyst to support our technology compliance, risk, and data-governance programs in Atlanta. This hands-on role maintains SOC 2 readiness, coordinates IT controls, and supports data retention initiatives.

The ideal candidate has experience in IT audit or cybersecurity compliance and is eager to develop their expertise while partnering with multiple teams to strengthen our security posture.