GRC Analyst

Job DescriptionWe are seeking a detail-oriented GRC Analyst to support and manage regulatory compliance, governance, and risk programs. This role will help ensure the organization remains aligned with applicable regulations, industry standards, and internal policies while maintaining audit readiness and scalable compliance processes.The GRC Analyst will manage compliance programs and controls, support audits and certifications, oversee remediation efforts, and partner cross-functionally with Legal, IT, HR, Finance, and Security. The ideal candidate has strong knowledge of compliance frameworks and the ability to translate regulatory requirements into practical business processes.Key ResponsibilitiesImplement and maintain compliance programs, controls, and processes.Monitor compliance with frameworks and regulations including GDPR, HIPAA, SOC 2, and ISO 27001.Support and coordinate internal and external audits and certification processes.Track compliance findings, risks, and remediation activities.Develop and maintain policies, procedures, and compliance documentation.Conduct compliance risk assessments and identify control gaps and emerging risks.Maintain risk and compliance registers and escalate significant issues.Support investigations involving compliance violations or data privacy incidents.Coordinate compliance training and promote organization-wide awareness.Partner with cross-functional teams to ensure ongoing compliance.Qualifications1+ year of experience in compliance, regulatory affairs, GRC, or internal controls.Working knowledge of GDPR, HIPAA, SOC 2, and ISO 27001.Experience supporting or participating in compliance audits or certifications.Ability to interpret regulatory requirements and apply them to business processes.Experience with GRC platforms such as Drata, Vanta, ServiceNow GRC, OneTrust, or similar tools.Strong attention to detail and organizational skills.Excellent written and verbal communication skills.Ability to manage multiple priorities in a fast-paced environment.Proactive, analytical, and solution-oriented approach.