1w
Save
Mark Applied
Hide
Information Security GRC Analyst 4
San Jose or Seattle or Lehi or New York City
$113k-$229k/yr OnsiteFull Time
5+ YOE5+ years GRC/InfoSec experience, knowledge of SOC/ISO/HIPAA/FedRAMP/NIST frameworks, program and audit leadership, strong communication and analytical skills.
AWS, Azure, GCP, Adobe Common Controls Framework (CCF)
2mo
Save
Mark Applied
Hide
Contract Information Security GRC Analyst
Kennett Square or Denver or Charlotte
OnsiteFull Time
3+ YOE3-5+ years IT audit/risk experience; bachelor’s in Information Security/CS/Risk; SOC 2 experience; knowledge of NIST/ISO; CRISC, CDPSE, CISA, CISSP, ISO 27001 lead auditor/implementer preferred; strong analytical/written skills.
NIST SP 800-30, ISO 27005, NIST CSF, NIST 800-53, ISO 27001, CIS, SOC 2 Trust Services Criteria, Cloud Control Matrix (CCM), Risk Management tools
2w
Save
Mark Applied
Hide
Sr Information Security GRC Analyst
Irvine, California, United States
$130k-$170k/yr OnsiteFull Time
7+ YOE7+ years GRC or related experience, experience with HITRUST/ISO 27001/SOC 2/NIST, third-party risk assessments, strong documentation and stakeholder skills, bachelor's degree in related field required.
HITRUST, ISO 27001, SOC 2, NIST CSF, PCI DSS, UK Cyber Essentials, NIS2, HIPAA, FDA
2d
Save
Mark Applied
Hide
Security GRC Analyst
United States
$70k-$77k/yr RemoteFull Time
1+ YOEExecute GRC functions including risk assessments, vendor risk, compliance, security awareness, reporting, and audit readiness; 1+ years GRC or risk experience; bachelor\u0002s degree in related field.
ServiceNow, Archer, Microsoft SharePoint, Microsoft Power BI, UpGuard, Azure, AWS
3w
Save
Mark Applied
Hide
Security GRC Analyst
San Francisco, California, United States
$116k-$160k/yr OnsiteFull Time
2+ YOE2–4 years GRC/compliance/audit or information security experience; working knowledge of at least two of SOC 2, HIPAA, ISO 27001, or GxP; proficiency with GRC/audit tools and Microsoft Office or Google Workspace; strong communication skills.
SOC 2, HIPAA, ISO 27001, GxP, Microsoft Office Suite, Google Workspace, Drata, Vanta, OneTrust, ServiceNow GRC
2w
Save
Mark Applied
Hide
Information Security GRC Analyst 3
Centennial or Decatur or Cape Canaveral or Vandenberg AFB
$104k-$173k/yr OnsiteFull Time
4+ YOEBachelor in STEM or equivalent experience, 4+ years related experience, working knowledge of CNSSI 1253/NIST/ISO frameworks, experience in regulated A&D/DoD environments, strong analytical and communication skills.
CNSSI 1253, NIST SP 800‑53, NIST SP 800‑171, NIST SP 800‑172, ISO/IEC 27001:2022, Risk Management Framework (RMF), Zero Trust, DFARS, CMMC
1mo
Save
Mark Applied
Hide
GRC Security Analyst II
Bryn Mawr, Pennsylvania, United States
OnsiteFull Time
3+ YOE3+ years GRC or information security experience; bachelor’s in IT-related field; risk, vulnerability, and compliance assessment experience; familiarity with ISO/NIST/COBIT/CIS; must obtain one listed security certification within 12 months.
Qualys Policy Compliance, CIS-CAT, Qualys, RSA Archer, Microsoft Active Directory, Microsoft Office 365, Microsoft Azure
2w
Save
Mark Applied
Hide
Information Security Analyst (GRC & Operations)
Las Vegas, Nevada, United States
$62k-$80k/yr HybridFull Time
1+ YOEBachelor's in cybersecurity or equivalent experience,1+ years cybersecurity/GRC/IT experience,knowledge of NIST CSF/CIS/ISO27001/PCI DSS,EDR exposure,vulnerability and access management,training and communication skills.
NIST CSF, CIS Controls, ISO 27001, PCI DSS, EDR
2w
Save
Mark Applied
Hide
Information Security Analyst (GRC & Operations)
Las Vegas, Nevada, United States
$62k-$80k/yr HybridFull Time
1+ YOEBachelor's in cybersecurity or equivalent experience,1+ year cybersecurity/GRC/IT experience,knowledge of NIST CSF/CIS/ISO27001/PCI DSS,EDR and vulnerability concepts,strong communication and training skills,English fluency.
EDR, NIST CSF, CIS Controls, ISO 27001, PCI DSS
4d
Save
Mark Applied
Hide
Senior Information Security Analyst, GRC/Responsible AI
Irvine or Milpitas
$125k-$207k/yr OnsiteFull Time
6+ YOE6+ years information security experience with GRC and AI risk management, bachelor's or equivalent, technical proficiency in threat modeling and risk assessment, familiarity with NIST AI RMF and ISO/IEC 42001, and strong cross‑functional communication.
OWASP Top 10 for LLM Applications, NIST AI RMF, ISO/IEC 42001, STRIDE, PASTA, attack tree analysis, CI/CD
4d
Save
Mark Applied
Hide
Sr Security (GRC) Analyst
Wichita or Atlanta
HybridFull Time
Experience in cybersecurity/GRC, risk assessments, security frameworks, policy development, audit/assurance, vendor risk, and translating technical risk for leadership.
ZenGRC, OneTrust, NIST CSF, ISO 27001
1w
Save
Mark Applied
Hide
Information Security Analyst II (GRC)
Broomfield or Wichita
$78k-$98k/yr OnsiteFull Time
0+ YOEAssociate's or Bachelor's in IT/cybersecurity or equivalent experience; 0–2 years IT/cybersecurity experience; familiarity with security frameworks, Windows/Linux, networking; strong analytical and communication skills.
Microsoft Windows, Linux, PCI DSS, NIST 800-53, FedRAMP, ISO 27001, CIS, MITRE ATT&CK, OWASP Top 10
1mo
Save
Mark Applied
Hide
GRC Analyst
Lowell, Massachusetts, United States
$78k-$125k/yr OnsiteFull Time
1+ YOEBachelor's in relevant field (or equivalent), 1–3 years information security/risk/compliance experience, knowledge of security frameworks, strong analytical and communication skills, and willingness to learn ServiceNow GRC.
ServiceNow GRC, NIST, ISO 27001, SOC2, CIS, ISO9001, ISO14001
1mo
Save
Mark Applied
Hide
Information Security Risk Analyst
New Brunswick, New Jersey, United States
$108k-$165k/yr HybridFull Time
5+ YOEBachelor's in a related field and 5+ years information security experience; knowledge of HIPAA, GLBA, PCI DSS, NIST CSF; experience with GRC/VRM; strong communication and risk assessment skills.
HIPAA, GLBA, PCI DSS, NIST CSF, NIST 800-171, ISO 27001, ISO 27002, GRC, VRM
3mo
Save
Mark Applied
Hide
TPDD Analyst, Information Security GRC
Jacksonville, Florida, United States
OnsiteFull Time
Governance, risk, and compliance in information security; degree in information security or related field; CISSP or equivalent; experience with policies, metrics, audits; strong technical writing.
Excel, Workflow automation tools, Data visualization, Scripting, Regular expressions, SDLC, NIST Cyber Security Framework, CIS, GRC Platforms
18h
Save
Mark Applied
Hide
Information Security Governance, Risk & Compliance (GRC) Analyst
Rockville, Maryland, United States
OnsiteFull Time
Experience in information security governance, risk management, or compliance; strong analytical, written and verbal communication, organizational skills; ability to learn new technologies and work independently.
ServiceNow Integrated Risk Management (IRM), Microsoft Office 365
2mo
Save
Mark Applied
Hide
Sr. GRC Analyst
United States
$95k-$105k/yr RemoteFull Time
3+ YOE3–5 years in GRC/Information Security or Audit; PCI DSS/NIST CSF; data governance (RoPA); IAM; SOX ITGCs; AI tooling for GRC.
Vanta, KnowBe4, Mimecast, PCI DSS
3d
Save
Mark Applied
Hide
GRC Analyst
Dallas, Texas, United States
OnsiteFull Time
4+ YOE4+ years GRC or information security governance experience; hands-on change management, risk assessment, policy management; familiarity with ISO 27001/SOC 2/NIST CSF; stakeholder engagement and strong written communication.
ServiceNow GRC, Vanta, Drata, Hyperproof, Archer, Jira, Confluence
1mo
Save
Mark Applied
Hide
Information Security – Risk & Compliance Analyst
Easton or United States or Europe or Asia
HybridFull Time
0+ YOE0–2 years in information security, IT audit, or risk; familiarity with NIST CSF, ISO/IEC 27001, CMMC, and NIS2; experience with risk assessments, third-party audits, cloud/DevOps/application security; CompTIA Security+ or equivalent; CISA preferred.
NIST CSF, ISO/IEC 27001, CMMC, NIS2 Directive, cloud computing, DevOps, application security, GRC platform
2mo
Save
Mark Applied
Hide
Senior GRC Analyst
United States or Canada
$130k-$160k/yr RemoteFull Time
5+ YOE5+ years in GRC, information security, IT audit or risk management; hands-on SOC 2, ISO 27001/HITRUST; policy, evidence & audit readiness; strong communication.
Vanta, Drata, Thoropass, Secureframe
Explore Jobs