Governance, Risk and Compliance Analyst III (GRC Analyst III) (Cybersecurity)

Location: Remote; candidates must be legally authorized to work in the United States without immigration support or sponsorship from hirify.global now or in the future. Occasional travel is required.

Salary: $95,574–$181,228 overall; $109,910–$181,228 for Alaska, California, Connecticut, Illinois, Maryland, Massachusetts, New Jersey, New York City, Pennsylvania, Virginia, Washington, and the District of Columbia; $95,574–$157,590 for all other locations.

Company

hirify.global provides services and solutions in risk management, regulatory compliance, data analytics, employee benefits, investment consulting, healthcare, insurance, and financial services.

What you will do

• Manage information security contract, questionnaire, RFP/RFQ, MSA, BAA, addenda, and related document reviews in collaboration with Legal, Compliance, Information Security, and business teams.
• Create and maintain GRC dashboards, KRIs/KPIs, executive and Board-level reports, remediation tracking, audit-readiness reporting, and continuous compliance monitoring.
• Design and maintain AI agents, automations, dashboards, and workflows for questionnaire responses, contract triage, control mapping, audit evidence, vendor intake, reminders, escalation, and reporting.
• Coordinate external information security audits, SOC 2 requests, technology and security assessments, third-party auditor inquiries, evidence delivery, and secure audit repositories.
• Support vendor risk management through vendor identification, risk assessments, documentation review, risk scoring, reporting, reassessments, and escalation of control gaps.
• Administer and report on information security awareness training compliance for employees and contractors, including metrics, reminders, escalations, and completion evidence.

Requirements

• 6–10 years of experience in information security, risk management, audit, compliance, GRC, or related IT roles.
• Hands-on security audit or assessment experience, preferably with a consultancy, professional services, finance, insurance, or similar organization.
• Experience with ISO/IEC 27000 series, NIST Cybersecurity Framework, HITRUST CSF, HIPAA, SOC 2, and related security and control frameworks.
• Experience with SIEM, VPN, TCP/IP, vulnerability scanning tools such as Qualys, Active Directory, proxy, firewall, IDS/IPS, routers and switches, and open-source information collection.
• Experience developing dashboards, metrics, KRIs/KPIs, executive reports, and remediation tracking.
• Advanced proficiency with Microsoft Word, Excel, OneNote, PowerPoint, and similar productivity tools.
• Strong understanding of security principles, audit practices, policies, guidelines, compliance, and risk management, plus technical knowledge of networking, operating systems, identity and access management, secure SDLC, and Azure or AWS.
• Ability to interpret security data, identify compliance issues, and translate complex technical topics into clear business language.
• Excellent project management, prioritization, independent work, communication, presentation, problem-solving, stakeholder management, leadership, influence, and collaboration skills.
• Ability to work effectively in a globally distributed organization and understand international information security regulations.

Nice to have

• Bachelor’s or Master’s degree in Computer Science, Engineering, Information Security, or a related field.
• CISSP, CISA, CRISC, or equivalent certification.
• Experience with automation, workflow creation, AI-enabled tools, or GRC/reporting platforms.

Culture & Benefits

• Remote work within the United States with occasional travel.
• Medical, dental, and vision coverage for employees, dependents, and domestic partners.
• 401(k) matching and profit-sharing contributions, discretionary bonus program, and flexible spending accounts.
• Paid time off, at least 10 paid holidays annually, and 11 weeks of paid parental leave for eligible employees.
• Family-building benefits, employee assistance program, life insurance, and fully paid short-term and long-term disability coverage.