TL;DR

Governance, Risk & Compliance (GRC) Analyst: Supporting the development and maintenance of compliance frameworks to ensure regulatory and operational standards are met with an accent on data protection, privacy, and security. Focus on collaborating with engineering and product teams to implement structured compliance practices.

Location: Must be based in one of our SF, NYC, or Washington, D.C. hubs with a 4 days/week in office requirement.

Company

%hirify_global% supports public safety agencies across the country, empowering public servants to improve operations and make better decisions.

What you will do

Support the implementation, tracking, and continuous improvement of compliance frameworks (SOC 2, CJIS, HIPAA, ISO 27001, FedRAMP, NIST 800-53).
Manage and organize compliance documentation, internal audits, and evidence collection for both internal and external stakeholders.
Collaborate with internal teams to update policies, procedures, and controls related to data protection, access management, and incident response.
Maintain strong awareness of security best practices in cloud environments - particularly AWS.
Use compliance management tools to streamline reporting and evidence collection.
Contribute to audit readiness and help respond to customer and vendor compliance inquiries.

Requirements

5-10 years of experience in information security, compliance, or risk management within regulated industries.
Working knowledge of SOC 2, HIPAA, CJIS, FedRAMP, ISO 27001, NIST 800-53.
Understanding of cloud-native SaaS environments and identity management concepts.
Detail-oriented with strong organizational skills.
Clear communicator able to translate complex security concepts.