Senior Security Risk & GRC Analyst

APCO Holdings, LLC; Ponte Vedra Beach (FL); On-site; USD 115,000 - 165,000; Full time

Benefits offered by this job

Competitive compensation

Medical, dental, and vision benefits

401(k) with company match

Paid time off and holidays

Certification support

Job summary

APCO Holdings, LLC is seeking a Senior Security Risk & Compliance Analyst to strengthen governance, risk, and compliance initiatives. You will drive compliance efforts, assess security controls, identify risks, and support a strong security posture across the organization.

You will lead audits, manage the GRC platform, and collaborate with IT, Legal, and business units to align with regulatory requirements and customer security questionnaires.

Qualifications

• Bachelor’s degree or equivalent experience in information security, information systems, or related field.
• 5+ years in security compliance, audit, or GRC.
• Hands‑on with SOC 2 audits and Trust Services Criteria and NY 23 NYCRR 500 or similar.
• Experience performing internal audits and control testing.
• Familiarity with GRC tools such as ServiceNow GRC and Archer GRC.
• Strong understanding of risk management principles and frameworks (SOC 2, ISO 27001, NIST).
• Experience leading due diligence activities for customers/partners.

Responsibilities

• Support planning, coordination, and execution of compliance audits and readiness assessments.
• Partner with control owners to document and maintain compliance controls.
• Collect, review, and validate audit evidence; track findings and remediation.
• Audit plans, testing procedures, and audit reports; identify gaps and remediation actions.
• Administer and maintain the organization’s GRC platform and workflows.
• Maintain enterprise risk register and facilitate risk assessments.
• Collaborate with IT, Security, Legal, and business units on compliance requirements.

Skills

SOC 2 audits

GRC management

Regulatory compliance

Risk assessment

Audit testing

Education

Bachelor’s degree in Information Security or related

Tools

ServiceNow GRC

Archer GRC

Job description

APCO Holdings, LLC is seeking a Senior Security Risk & Compliance Analyst to strengthen governance, risk, and compliance initiatives. You will drive compliance efforts, assess security controls, identify risks, and support a strong security posture across the organization.

You will lead audits, manage the GRC platform, and collaborate with IT, Legal, and business units to align with regulatory requirements and customer security questionnaires.