Governance, Risk & Compliance (GRC) Analyst (NYC or Washington D.C.)

Location: Hybrid role based in either the NYC or Washington D.C. office, with a 4-day-per-week in-office requirement.

Annual salary: $150,000–$165,000 USD, plus benefits, potential equity, and potential bonus.

Company

hirify.global develops an AI-enabled platform that turns siloed data into operational intelligence for public safety organizations, government agencies, and private-sector institutions.

What you will do

• Support implementation, tracking, and continuous improvement of SOC 2, CJIS, HIPAA, ISO 27001, GDPR, FedRAMP, and NIST 800-53 compliance frameworks.
• Manage compliance documentation, internal audits, evidence collection, audit readiness, and responses to customer and vendor compliance inquiries.
• Update policies, procedures, and controls for data protection, access management, and incident response in collaboration with engineering, product, and leadership.
• Monitor cloud security best practices in AWS, including GuardDuty, SecurityHub, Amazon Inspector, and AWS Config.
• Use Vanta, Drata, SecureFrame, or HyperProof to streamline reporting and evidence collection.
• Partner with technical teams to apply IAM, MFA, and least-privilege principles correctly.

Requirements

• 7–10 years of experience in information security, compliance, or risk management within regulated industries such as healthcare, finance, or government.
• Working knowledge of SOC 2, HIPAA, CJIS, FedRAMP, ISO 27001, NIST 800-53, or similar frameworks.
• Understanding of cloud-native SaaS environments, microservices, VPCs/VPNs, and identity management concepts including RBAC and MFA.
• Strong attention to structure, accuracy, and organization when managing documentation and multiple compliance tasks.
• Collaborative, curious approach and ability to improve processes while contributing to shared goals.
• Ability to translate complex security concepts into simple, actionable language for different audiences.
• Ability to work from the NYC or Washington D.C. office four days per week.

Nice to have

• CGRC, CISSP, CISA, CIPP/US, HCISPP, or CompTIA Security+ certification.
• CCSP, CCSK, AWS Security – Specialty, AWS Solutions Architect – Associate, or CompTIA Cloud+ certification.
• Experience with public safety, justice, government agencies, or other highly regulated data environments.
• Familiarity with CJIS, SOC 2, or overlapping control frameworks.
• Experience building scalable, user-friendly compliance systems in a fast-growing organization.

Culture & Benefits

• Benefits, potential equity, and potential bonus are included in the compensation package.
• Work closely with engineering, product, and leadership teams.
• Inclusive workplace and equal opportunity employment environment.