GRC Analyst

Qualifications include: 6 years of GRC experience and experience with SIG.

Salary Range: $100-120K; salary negotiable based on experience, education, geographic location, and other factors This is a great opportunity to work with a fast-growing and stable company offering a positive work environment and consistently earns a spot on Chicago and Cleveland's Top Workplaces list! The role offers excellent benefits including 20 days of PTO to start and 37.5 hour workweek!

GRC Analyst Job Responsibilities Include: Governance Develops, maintains, and updates security and compliance policies, standards, and procedures. Supports internal governance processes, including document lifecycle management, policy reviews, and approvals. Tracks and reports on compliance with internal control frameworks and policies. Risk Management Leads third-party risk management activities, including vendor assessments, evidence review, and continuous monitoring. Conducts and documents risk assessments across business units, systems, and processes. Maintains the enterprise risk register and ensures risks are properly categorized, scored, and remediated. Partners with stakeholders to identify risk treatment options and tracks remediation activities. Compliance Assists with compliance efforts related to client obligations, outside counsel guidelines, and frameworks such as ISO 27001, CIS, SOC 2, NIST CSF/800-53, GDPR, HIPAA, PCI, or others relevant to the organization. Collects, validates, and maintains evidence for internal/external audits. Supports regulatory and certification audits by coordinating with internal teams and external auditors. Monitors and reports on compliance gaps, exceptions, and corrective actions. Security Awareness & Training Helps develop and administer security awareness programs. Supports phishing simulation campaigns and related analytics to track organizational improvement. Monitoring & Reporting Produces regular and ad-hoc reports on risk, compliance posture, and control effectiveness. Utilizes GRC tools (e.g., SIG, Archer, One Trust, Logic Gate, ZenGRC) to manage workflows and dashboards. Tracks KPIs/KRIs to measure program maturity and effectiveness.

Qualifications: Bachelor's degree in Information Security, Cybersecurity, Information Technology, Business, or a related field, OR equivalent professional experience. Minimum of six years' experience in GRC, which must use of GRC tools such as SIG, Archer, One Trust, Logic Gate, ZenGRC. SIG experience at minimum is a MUST HAVE.Foundational understanding of cybersecurity principles and risk management, and knowledge of compliance frameworks such as ISO 27001, CIS, and NIST, Strong analytical and documentation skills, excellent communication, and stakeholder management abilities.

Preferred qualifications include: (plusses; not required):CISA, CRISC, CGRC, Security+, ISO 27001 Internal Auditor, or CISM certification, whether in progress or completed. Experience supporting audits or risk assessments in a regulated environment. If you are interested in this hybrid GRC Analyst role in Cleveland, OH, please click APPLY NOW. For other opportunities available at Akkodis go to www.akkodis.com. If you have questions about the position, please contact Kathy Becher at kathy.becher@akkodisgroup.com. Equal Opportunity Employer/Veterans/Disabled Benefits offerings include but are not limited to: PTO of up to 20 days per year to start Retirement Savings Plan and Profit Sharing Plan Medical and Dental Plans To read our Candidate Privacy Information Statement, which explains how we will use your information, please visit https://www.akkodis.com/en/privacy-policy.The Company will consider qualified applicants with arrest and conviction records in accordance with federal, state, and local laws and/or security clearance requirements, including, as applicable:· The California Fair Chance Act· Los Angeles City Fair Chance Ordinance· Los Angeles County Fair Chance Ordinance for Employers· San Francisco Fair Chance Ordinance