vGRC Analyst (Hybrid) — SOX & InfoSec Compliance

Tevora; Fairfax (VA); Hybrid; USD 95,000 - 105,000; Full time

Benefits offered by this job

Group Medical, Dental, Vision, Life, F

FSA

PTO & Holidays

401k with Company Match

Vibrant work culture

Job summary

Tevora, a cybersecurity and compliance firm, seeks an Analyst – vGRC to support clients across GRC programs, audits, policy development, and InfoSec best practices. The role emphasizes SOX ITGCs, cross-functional collaboration, and delivering guidance to clients with strong communication skills.

You will engage in audit coordination, risk assessments, and documentation while working in a hybrid setup (Irvine, CA). A background in IT security and relevant certifications is preferred.

Qualifications

• Direct experience with ITGCs of SOX in audit roles.
• Ability to communicate across business and technical boundaries.
• Ability to work independently with minimal guidance.
• Understanding and predicting customer and project needs.
• Strong prioritization of multiple timelines across client work.
• Proven ability to write executive-level reports and technical docs.
• Solid knowledge of common IT concepts.
• At least one IT/certification such as CPA, CISSP, CISA, CISM, CRISC.
• Bachelor's degree from a 4-year university.
• Minimum 3 years in information security, IT, risk, or compliance.
• Experience with ISO 27001, SOC 2, SOC 1, SOX, or PCI-DSS.

Responsibilities

• Support clients in GRC programs, audit support, policy development, and InfoSec best practices.
• Drive SOX ITGC audits as part of the GRC team.
• Coordinate audits including control reviews, evidence collection, and work coordination.
• Lead or support compliance and risk assessments, guiding junior resources.
• Conduct interviews to analyze controls or risk and provide recommendations.
• Manage multiple client engagements concurrently.
• Communicate requirements to project stakeholders about tech/process improvements.
• Develop policies, procedures, controls, disaster recovery, and related docs.
• Collaborate with cross-functional teams to provide InfoSec compliance support.

Skills

SOX ITGCs

Client communication

Independent work

Customer insight

Project prioritization

Executive reporting

IT concepts

InfoSec certs

Bachelor’s degree

3 years experience

ISO 27001

SOC 2

PCI-DSS

Education

Bachelor's Degree

Job description

Tevora, a cybersecurity and compliance firm, seeks an Analyst – vGRC to support clients across GRC programs, audits, policy development, and InfoSec best practices. The role emphasizes SOX ITGCs, cross-functional collaboration, and delivering guidance to clients with strong communication skills.

You will engage in audit coordination, risk assessments, and documentation while working in a hybrid setup (Irvine, CA). A background in IT security and relevant certifications is preferred.